A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Deepfakes Software For All

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

A Gradio web UI for Large Language Models.

Automatic SQL injection and database takeover tool

Reverse engineered ChatGPT API

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.

Glances an Eye on your system. A top/htop alternative for GNU/Linux, BSD, Mac OS and Windows operating systems.

🗃 Open source self-hosted web archiving. Takes URLs/browser history/bookmarks/Pocket/Pinboard/etc., saves HTML, JS, PDFs, media, and more...

Run macOS on QEMU/KVM. With OpenCore + Monterey + Ventura + Sonoma support now! Only commercial (paid) support is available now to avoid spammy issues. No Mac system is required.

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the contr…

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.

Stable Diffusion web UI

(⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.

🔍 Google from the terminal

Streamlined interface for generating images with AI in Krita. Inpaint and outpaint with optional text prompt, no tweaking required.

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

Python library for backtesting trading strategies & analyzing financial markets (formerly pythalesians)

A collection of custom security tools for quick needs.

Open-source Dropbox client for macOS and Linux

Hash collisions and exploitations

A linter for YAML files.

Inofficial Qualcomm Firehose / Sahara / Streaming / Diag Tools :)

💉 Stuff which works in Chrome and maybe Acrobat and Foxit.

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

A series of blog posts and talks about the world of containers 📦

This repository is unmaintained. Visit:

Data for the main F-Droid repository.