Starred repositories
Scan your Google Cloud organization for insecure/misconfigured API and Service Account keys
Desktop app to control your computer with AI using your terminal, browser, mouse & keyboard
MCP configuration to connect AI agent to a Linux machine.
A Django web application for curating Bug Bounty educational Videos
A phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak sensitive device-activity patterns. (WhatsApp /…
The independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic core, no API key needed, JSON and SARIF output.
Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, and orchestrating security tool usage, we confi…
Initial Access and Post-Exploitation Tool for Entra ID and M365 with a browser-based GUI
BT tracker 服务器列表，提供全网最全的 tracker 列表，每日聚合并测试存活服务器，trackers_all.txt 为全量列表（2902 行），trackers_best.txt 为可用列表（1137 行）
Blind XSS Scanner is a tool that can be used to scan for blind XSS vulnerabilities in web applications.
A collaborative, multi-platform, red teaming framework
AdaptixC2 is a highly modular advanced redteam toolkit
Instant Windows & Office Activation: 40–Second Solution
A reference sheet of Windows 10 native icons and where they are located.
GNU/Linux post exploitation tool for info gathering and exfiltration 🐧📡💀
(?i)((access_key|access_token|admin_pass|admin_user|algolia_admin_key|algolia_api_key|alias_pass|alicloud_access_key|amazon_secret_access_key|amazonaws|ansible_vault_password|aos_key|api_key|api_ke…
Privilege Escalation Enumeration Script for Windows
Find, verify, and analyze leaked credentials
PHP CGI Argument Injection (CVE-2024-4577) Remote Code Execution PoC
GarudRecon automates domain recon with top open-source tools to discover assets, enumerate subdomains, and detect XSS, SQLi, LFI, RCE & more.
IP Finder tool, ipfinder collects IP addresses from Shodan search queries.
Here are the most interesting Shodan dorks (according to me)
Collection of publicly available IPTV channels from all over the world