hosts
stevenblack/hosts🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.
curated-resourcesdns-analysisinformation-gathering+3
31.1k
stevenblack/hosts🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.
trufflesecurity/trufflehogFind, verify, and analyze leaked credentials
idiom/pftriagePython tool and library to help analyze files during malware triage and analysis.
adamkadaban/ctfsCTF Cheat Sheet + Writeups / Files for some of the Security CTFs that I've done
blake3-team/blake3Fast cryptographic hash function with PRF, MAC, KDF, and XOF modes. Supports verified streaming, incremental updates, and parallelized hashing via…
ragibson/steganographyLeast Significant Bit Steganography for bitmap images (.bmp and .png), WAV sound files, and byte sequences. Simple LSB Steganalysis (LSB extraction)…
jonaslejon/malicious-pdfGenerate malicious PDF test files for penetration testing, bug bounty hunting, and red teaming. Tests SSRF, XSS, XXE, NTLM credential theft, and data…
kvesel/zipbrkZip file format fuzzer and multi-tool.
syvaidya/openstegoOpenStego is a steganography application that provides two functionalities: a) Data Hiding: It can hide any data within an image file. b)…
antropos17/aegisDesktop monitoring and local security reviews for AI agents, with opt-in policy-controlled execution and MCP action tools. Windows primary;…
rufflabs/ludus_crushftp_cve-2025-31161_simAnsible role that simulates a realistic CrushFTP CVE-2025-31161 exploitation scenario with rotating sensitive data files and automated defender…
dimareverse/nuitka-static-unpackerStatic-first research tool for unpacking Nuitka-compiled binaries: extracts constants, modules, recovers .pyc files, and generates analysis reports.
skylot/jadxCommand-line and GUI tool for decompiling Android Dex and APK files into readable Java source code, with resource decoding, deobfuscation, and Smali…
d-xuan/cve-2024-52510Proof-of-concept exploit for CVE-2024-52510 demonstrating signature bypass in Nextcloud's E2EEv2 protocol, enabling server-side decryption of…
gitleaks/gitleaksFast, open-source static analysis tool for detecting hardcoded secrets like passwords, API keys, and tokens in git repositories, files, and stdin…
qg5casz/walletoolExtracts cryptocurrency private keys and addresses from wallet.dat files for Bitcoin and Litecoin, enabling wallet recovery and forensic analysis.
hackwarts12/burp-recordadoraPersists BurpSuite proxy history, Repeater requests, and Intruder payloads across sessions; exports and imports .log files for web pentesting context.