Tools

0xcub3/wblock

The next-generation ad blocker for Safari. Free and open source on macOS, iOS, iPadOS, and visionOS, with 750,000 rules, userscripts, userstyles, and…

jm33-m0/emp3r0r

Self‑healing Gossip Mesh C2 with Assisted Peer Discovery, Cross-Platform BOF Execution, and Scriptable Agents.

zeek/zeek

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

projectdiscovery/nuclei

Fast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…

mitchellkrogza/nginx-ultimate-bad-bot-blocker

Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS,…

captmag/maldev

Creation of multiple Malware tools consisting of evasion, enumeration and exploitation

coreruleset/coreruleset

Generic attack detection rule set for web application firewalls, protecting against OWASP Top Ten and common vulnerabilities with minimal false…

kaliiiiiiiiii-vinyzu/patchright

Undetected version of the Playwright testing and automation library.

grm2ngo/turnstile

Research notes and offline verification tooling for Cloudflare Turnstile, covering the 2-POST chain, per-fetch build pool, capture protocol, and FO1…

deepbluedynamics/grubcrawler

The world's fastest agentic crawler. Reclaimed. Reinvented. Ready for war.

chaitin/safeline

Self-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…

fzakaria/anubis-fetch

Like curl, but it gets past Anubis and Cloudflare bot-walls.

antisurveillanceagency/shadownet

ShadowNet is an anonymous routing protocol that forces all connections (system-wide) to go through Tor while implementing Mixnet-like…

spider-rs/spider

Get web data for AI agents and LLMs

eshlomo1/cloudsec

Master the art of cloud exploitation. A specialized resource for offensive security researchers and red teamers focused on weaponizing…

austin-weeks/miasma

Trap AI web scrapers in an endless poison pit.

vincentkaufmann/noapi-google-search-mcp

MCP server for Google search and page fetching using headless Chromium

sarperavci/googlerecaptchabypass

Solve Google reCAPTCHA in less than 5 seconds! 🚀