HarmonyOS NEXT Decompiler(纯血鸿蒙反编译器)
A comprehensive list of usable Entra ID first-party clients with pre-consented Microsoft Graph scopes, in a simple YAML-file explorable with a simple HTML GUI.
Red Team Arsenal - a comprehensive collection of tools, scripts, and techniques for conducting red team operations and adversary simulations, including custom beacons, malleable C2 profiles, aggressor scripts, advanced payload generation methods, as well as other evasion tools, tailored for red team operations and security research.
Frameless Browser‑in‑the‑Browser (BitB) - No iframes, no frame‑busting issues. A single‑script Shadow DOM / MutationObserver library for realistic phishing simulations, easily injected via reverse proxy.
Research about gmail's cookies, how to read and write mails with only 4 cookies.
Advanced offline firmware triage and analysis tool for routers, IoT devices, DVRs, IP cameras, and embedded Linux firmware.
This tool is an implementation of the Telegram Bot API for Linux terminal use. It's ment for quick OSINT and grading useful information or to do things like takedown, destroy or grab messages. Note, this tool is converted from a web-tool I once made to C++ and done so via Claude.
A Dockerized environment for Kali Linux, optimized for penetration testing and security research.This repository contains a Dockerfile to build and run a Kali Linux container with a graphical user interface (GUI) accessible via Remote Desktop Protocol (RDP).
TradMod's Security Reviews Portfolio, Audits and Bug Report Findings
Polymorphic PowerShell Exec Framework. Rev Shell Payload Obfuscation, Defender Evasion Tactics, Encrypted C2 Tunnel.
All about Bugz Learning Resources | Tools | Writeups >> [This repository is continuously updated with regard to my own learning journey]
All-in-One Master ASN Processing with 0x ASN Processor | CIDR, DNS, IP & Port Scanning Made Easy!
Your Ultimate Companion for Security Testing and Vulnerability Tracking
Offensive Security Research, Corporate Espionage Investigation
OSINT-Investigator: A modular Python framework for OSINT, forensics, and security research. It integrates Scrapy, Selenium, and Playwright to gather intelligence from diverse sources. IMPORTANT: This is a Work in Progress (WIP); core architecture is set, but modules are under active development and not yet production-ready.
cWee is an advanced CVE (Common Vulnerabilities and Exposures) searching tool, built on top of the powerful nvdlib library.
CVE-2025-33053 Checker and PoC
Smart contract auditor & blockchain security researcher | Solidity, Rust, Move, Cairo, Golang | DeFi, Cross-chain, Blockchain security audits
Adaptive WAF fingerprinting and payload analysis framework for application security research with concurrent scanning, mutation engine, and HTML/JSON reporting
To associate your repository with the securityresearch topic, visit your repo's landing page and select "manage topics."