🌚 🌍 🌝 GeoIP 规则文件加强版，支持自行定制 V2Ray dat 格式文件 geoip.dat、MaxMind mmdb 格式文件、sing-box SRS 格式文件、mihomo MRS 格式文件、Clash ruleset、Surge ruleset 等。Enhanced edition of GeoIP files for V2Ray, Xray-core, sing-box,…

An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

Decompiler Explorer! Compare tools on the forefront of static analysis, now in your web browser!

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

Program for determining types of files for Windows, Linux and MacOS.

SQL databases in Python, designed for simplicity, compatibility, and robustness.

A collection of tools to perform searches on GitHub.

A cross-platform, customizable science fiction terminal emulator with advanced monitoring & touchscreen support.

Making Favicon.ico based Recon Great again !

Maintains a list of IPv4 DNS servers by verifying them against baseline servers, and ensuring accurate responses.

A collection of all the data i could extract from 1 billion leaked credentials from internet.

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

8-14 character Hashcat masks based on analysis of 1.5 million NTLM hashes cracked while pentesting

Find open databases - Powered by Binaryedge.io

WeirdAAL (AWS Attack Library)

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

Data extraction tool for Docker Registry API

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

😺 Running Hashcat on Google Colab with session backup and restore.

american fuzzy lop - a security-oriented fuzzer

Penetration tests guide based on OWASP including test cases, resources and examples.

Find broken links, missing images, etc within your HTML.

The lazier way to manage everything docker

Flaskr: Intro to Flask, Test-Driven Development (TDD), and JavaScript

The Open Source kanban (built with Meteor). Keep variable/table/field names camelCase. For translations, only add Pull Request changes to wekan/i18n/en.i18n.json , other translations are done at ht…

Impacket is a collection of Python classes for working with network protocols.

Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management