Featured

Latest Updates

View all updates
rust-deobf
New tool33 minutes ago

rust-deobf

GitHubvahpem/rust-deobf

Recover what obfuscation hides in Rust binaries (strings, crates, library functions, flattened control flow) via static analysis + Unicorn emulation,…

Indicator of Compromise (IOC) ManagementStatic AnalysisDynamic Analysis (Sandboxing)+6
413h 8m ago
strix — Updated!
Updated1h 34m ago

strix — Updated!

GitHubusestrix/strix

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

OSINT (Open Source Intelligence)ReconnaissanceVulnerability Scanners+9
72.1k8.1k4h 3m ago
OpcUaTrap
New tool4h 35m ago

OpcUaTrap

GitHub0xajstrike/opcuatrap

High-interaction OPC UA honeypot for ICS/SCADA — multi-profile (oil & gas, water, power grid), live process simulation, per-session threat scoring,…

Defensive ToolsSCADA/ICS SecurityInformation Gathering+5
217 days ago
WHFB-PinCapture
New tool5h 35m ago

WHFB-PinCapture

GitHubivancabrera02/whfb-pincapture

Captures Windows Hello PINs at entry by injecting a DLL into LogonUI.exe that sets a CPU hardware breakpoint on NgcSerializeConvenienceCredential,…

Privilege EscalationMemory ForensicsPassword Attacks+5
6210 days ago
nmg
New tool6h 35m ago

nmg

GitHubbaguette168/nmg

Generates parameterized .NET memory-shell payloads (VPP, MVC route, HttpListener) compatible with Godzilla, Behinder, and AntSword clients for red…

Defensive ToolsPayload GenerationPersistence Mechanisms+8
712 days ago
emsign-trust-scan
New tool7h 35m ago

emsign-trust-scan

GitHub0xajstrike/emsign-trust-scan

Offline scanner for the October 2026 eMudhra/emSign CA key compromise, finds affected certificates across OS trust stores, CA bundles, Java cacerts,…

Defensive ToolsIndicator of Compromise (IOC) ManagementStatic Analysis+6
315 days ago
velum-vmm
New tool8h 36m ago

velum-vmm

GitHubdovughs/velum-vmm

Windows x64 research hypervisor using Intel VT-x and per-CPU EPT hooks to intercept Nt/Ex/Mm routines, apply request policies, and stream live kernel…

Dynamic Analysis (Sandboxing)Reverse EngineeringDebuggers+4
50 days ago
nuclei — Updated!
Updated9h 36m ago

nuclei — Updated!

GitHubprojectdiscovery/nuclei

Fast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…

General Purpose UtilitiesVulnerability ScannersWeb Vulnerability Scanners+21
32.3k3.9k14h 9m ago
sliver v1.7.9
New release11h 36m ago

sliver v1.7.9

GitHubbishopfox/sliver

Adversary Emulation Framework

Penetration Testing FrameworksExploit FrameworksPayload Generation+16
12.2k1.6k1 day ago
mtk-imei-switcheroo
New tool12h 36m ago

mtk-imei-switcheroo

GitHuballtechdev/mtk-imei-switcheroo

Read and write IMEI records and WiFi/Bluetooth addresses in MediaTek NVRAM files or partition images. Includes interactive ADB tools for rooted…

Android SecurityEmbedded Systems SecurityReverse Engineering+5
27511 days ago
xss-payload-list
New tool13h 36m ago

xss-payload-list

GitHubproviesec/xss-payload-list

Curated collection of cross-site scripting payloads, polyglots, and injection test rules for web application penetration testing and bug bounty…

Web Vulnerability ScannersWeb Application ExploitationWeb Security+4
1403410 days ago
low-int-cert-monitor
New tool15h 37m ago

low-int-cert-monitor

GitHubglen-testing/low-int-cert-monitor

Monitor Certificate Transparency logs for certificates with trivially small EC private keys (the eMudhra weak-key class). P-256/384/521.

Defensive ToolsVulnerability ScannersVulnerability Analysis+3
1 day ago

Latest Exploits

View all exploits