gmh5225/malicious-code-detection-buguAI-based malicious code detection and obfuscation system with microservices for detection, packing, and code confusion, plus user and admin services.
gmh5225/malwaredbCurated collection of 961 malware families (1.36 GB) in password-protected ZIP archives, organized by family and type for analysis and research.
gmh5225/mapped-dumperA program written in C++ for remotely dumping manual mapped modules.
gmh5225/mcp-god-modeDid you ever just want it to do everything? 148 POWERFUL Infosec/Admin tools on a single MCP server.
openbba0/bbaAndroid app-cloning sandbox with a Frida-style CLI that spawns or attaches to cloned apps and injects QuickJS scripts using Gum Interceptor and…
brutelogic/unkoverBash 403/401 access bypass tester that probes a URL with header spoofing, method tampering, path normalization, and encoding techniques, returning a…
maximilianfeix/hexveroThe first look at a binary or app bundle: static, execution-free analysis with evidence. CLI, 15-tool MCP server and local web UI, Node only.
yv1ing/secboxConducting cybersecurity testing using the pi agent in a pre-built sandbox environment.
affolter-engineering/xssearchRust-based XSS scanner with context-aware payload selection, WAF detection and bypass, crawling, blind XSS callbacks, and static DOM sink analysis.
affolter-engineering/snmpenSNMP enumeration tool that queries SNMPv1/v2c hosts to extract system information, TCP connections, and write access for penetration testing and…
affolter-engineering/mqattackRust CLI for MQTT penetration testing: subscribe/publish, broker fingerprinting, ACL probing, topic enumeration, credential brute-force, and Last…
joda32/aditActive Directory recon and read-only security audit over ADWS (net.tcp/9389), in Go
kr0no/bloodhound-shellAn interactive command-line shell for BloodHound API.
roccoammon/active-directory-health-checkPowerShell GUI tool that runs 54 best-practice health and security checks against Active Directory, flagging Kerberoasting, DCSync, delegation and…
rorywag/hayabusa-bulk-runnerBulk-run Hayabusa across a folder of KAPE collections, one run per host, with per-host reports and a cross-host triage dashboard
ko0ler/homelabGNS3 home lab documenting a segmented network with Cisco ASAv firewall, L3 core, DMZ, and an Active Directory domain for practicing networking,…
ambitsecurity/jshoundFind every API request a web app makes, from the JavaScript it ships: method, URL, body, headers and GraphQL operations. One command.
osintversehq/otinstallerInstalls, runs, updates, and removes open-source OSINT command line tools by name, with typed inputs, JSON output, and saved results for automated…
