andspoilt

Run interactive android exploits in linux.

angularjs-csti-scanner

Automated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.

anlominus

GitHub Is the HOME ! 🔱 We believe in God, everyone else is suspicious 🔱

anonfiles-hunter

anonphisher

Automated phishing tool made by AnonyminHack5 to phish various sites with 30+ templates and also has an inbuilt ngrok already to easily help you generate your link and send it to your victim. Anonphisher tool is made with pure bash script and needs required packages for it to work.

anonymousmessenger

This is an unofficial repository, for the official repository visit: https://git.anonymousmessenger.ly/dx/AnonymousMessenger

anti-virus-evading-payloads

During the exploitation phase of a pen test or ethical hacking engagement, you will ultimately need to try to cause code to run on target system computers. Whether accomplished by phishing emails, delivering a payload through an exploit, or social engineering, running code on target computers is part of most penetration tests. That means that you will need to be able to bypass antivirus software or other host-based protection for successful exploitation. The most effective way to avoid antivirus detection on your target's computers is to create your own customized backdoor. Here is a simple way to evade anti-virus software when creating backdoors!

antivirus-artifacts

Anti-virus artifacts. Listing APIs hooked by: Avira, BitDefender, F-Secure, MalwareBytes, Norton, TrendMicro, and WebRoot.

apache-solr-log4j-cve-2021-44228

A Nuclei template for Apache Solr affected by Apache Log4J CVE-2021-44228

apachetomcatscanner

A python script to scan for Apache Tomcat server vulnerabilities.

aperisolve

Steganalysis web platform

api-fuzzer

API Fuzzer which allows to fuzz request attributes using common pentesting techniques and lists vulnerabilities

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

api-securityempire

API Security Project aims to present unique attack & defense methods in API Security field

api-wordlist

api_wordlist

A wordlist of API names for web application assessments

apicheck

The DevSecOps toolset for REST APIs

apiclarity

Reconstruct Open API Specifications from real-time workload traffic seamlessly.

apkhunt

APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their code.

apkinfector

Advanced Android AV Evasion Tool Written In Python 3 that can Embed/Bind meterpreter APK to any Legitimate APK

apkleaks

Scanning APK file for URIs, endpoints & secrets.

apkurlgrep

Extract endpoints from APK files

apologee

APOLOGEE is a Python script and Metasploit module that enumerates a hidden directory on Siemens APOGEE PXC BACnet Automation Controllers (all versions prior to V3.5) and TALON TC BACnet Automation Controllers (all versions prior to V3.5). With a 7.5 CVSS, this exploit allows for an attacker to perform an authentication bypass using an alternate path or channel to access hidden directories in the web server. This repository takes advantage of CVE-2017-9947.

aquatone

A Tool for Domain Flyovers

arachni

Web Application Security Scanner Framework

archcraft

// Source : ISO

archive

Hacking Methodology, Cheatsheats, Conceptual-Breakdowns

ares

Python botnet and backdoor

arjun

HTTP parameter discovery suite.

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。