The official Python library for Shodan

zeus-style banking trojan

A pure python, post-exploitation, data mining tool and remote administration tool for macOS. 🍎💻

Mercure is a tool for security managers who want to train their collaborators to phishing.

A curated list of awesome Windows Exploitation resources, and shiny things. Inspired by awesom

A curated list of Awesome Threat Intelligence resources

Proof-of-Concept exploit for Edge bugs (CVE-2016-7200 & CVE-2016-7201)

Repository of yara rules

Great iOS Jailbreak Material! - I Read Hundreds of Papers and PPTs. Only List the Most Useful Materials Here!

Threat Intelligence APIs

Credentials recovery project

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strin…

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

Home to public development of the NIST/NCCoE Mobile Threat Catalogue

A ruby script that scans for vulnerable & exploitable 3rd-party web applications on a network

ASP.NET Boilerplate - Module Zero

Angular Bootstrap Admin Panel Framework

VirusTotal Full api

Cross-platform utility that uncovers the technologies used on websites.

IA's public Wayback Machine (moved from SourceForge)

Demo: https://diafygi.github.io/webrtc-ips/

Knock Subdomain Scan

A ton of helpful tools

Automatic SQL injection and database takeover tool

Nikto web server scanner

WPScan is a black box WordPress vulnerability scanner.

A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique present…

Takes a URL and checks the system for the tilde enum vuln and then find the files.