pipelock

Open-source AI agent firewall forVerifiable Egress Control. !pipelock...

arpspoof

ARP spoof Install CGOENABLED=0 go install -ldflags "-s -w" -trimpath github.com/shadowy-pycoder/arpspoof/cmd/af@latest Usage af -h Usage of af: -I Display list of interfaces and exit. -d Enable debug logging -f Run ARP spoofing in fullduplex mode -g string IPv4 address of custom gateway Default:...

LolDriverScan

LolDriverScan LolDriverScan is a golang tool that allows users to discover vulnerable drivers on their system. This tool fetches the loldrivers.io list from their APIs and scans the system for any vulnerable drivers This project is implemented in Go and does not require elevated privileges to run...

CVE-2025-66478-github-patcher

Next.js CVE Auto-Patcher Automation tool written in Go to scan GitHub repositories, detect vulnerable Next.js versions CVE-2025-66478, and automatically create Pull Requests with the specific security patch. 📋 Prerequisites Make sure you have the following installed and configured in your...

mongoBuster

mongoBuster Hunt Open MongoDB instances! Features Worlds fastest and most efficient scanner Uses Masscan . Scans entire internet by default, So fire the tool and chill. Hyper efficient - Uses Go-routines which are even lighter than threads. Pre-Requisites - Go language sudo apt install golang...

PingRAT

PingRAT PingRAT secretly passes C2 traffic through firewalls using ICMP payloads. Features: Uses ICMP for Command and Control Undetectable by most AV/EDR solutions Written in Go Installation: Download the binaries or build the binaries and you are ready to go: $ git clone...

CyberStrikeAI

CyberStrikeAI 中文 | English The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next. CyberStrikeAI connects planning, execution, human oversight, evidence, and replay in one auditable...

hulk

Hulk DoS tool HULK DoS tool ported to Go language from Python. Original Python utility by Barry Shteiman http://www.sectorix.com/2012/05/17/hulk-web-server-dos-tool/ I just ported the code as is quick and dirty. Original functions names are keeped and original logic mostly keeped too. The main...

dnscontrol

DNSControl DNSControl is Infrastructure as Code for DNS. It includes a full-featured configuration language Javascript-compatible, plus "plug-ins" that speak to DNS provider APIs such as AWS Route 53, Cloudflare, and Gandi. It can send the same DNS records to multiple providers. It runs anywhere ...

Heartbleed

Heartbleed A checker site and tool for CVE-2014-0160. Public site at https://filippo.io/Heartbleed/ Tool usage: Heartbleed -service="servicename" example.com:443 Heartbleed servicename://example.com:443 Exit codes: 0 - SAFE; 1 - VULNERABLE; 2 - ERROR. recently changed See the online FAQ for an...

endsfuzzer

endsfuzzer endsfuzzer is a simple tool used to fuzz a list of domains for specific endpoints. It will check all the domains in a list for a single endpoint, then moves on to the next endpoint to check for. Features Fast. Makes use of go routines. Gentler to servers. Fuzzes all hosts for one...

SNOWCRASH

SNOWCRASH A polyglot payload generator Introduction SNOWCRASH creates a script that can be launched on both Linux and Windows machines. Payload selected by the user in this case combined Bash and Powershell code is embedded into a single polyglot template, which is platform-agnostic. There are fe...

koyane-framework

Koyane-Framework :: wordlist forge & analysis toolkit Early Stage | | / /| |\ \ / / / \ | \ | || | | || \ / \ | / || || | | || || | | / / | |/ / | | | | \ V / / /\ | | || | | | | |/ // /\ | . . || | | | | || | | || |/ /| |/ / | \ | | | | \ / | || . || | ||| | | / | || |/| || | | |/| || | |...

fake-sms

Fake-SMS A simple command line tool using which you can skip phone number based SMS verification by using a temporary phone number that acts like a proxy. Latest update : The tool no longer uses upmasked.com, as the service went down. We are using another provider which provides more phone number...

augustus

Augustus - LLM vulnerability scanner for prompt injection, jailbreak, and adversarial attack testing Augustus - LLM Vulnerability Scanner Test large language models against 210+ adversarial attacks covering prompt injection, jailbreaks, encoding exploits, and data extraction. Augustus is a Go-bas...

CVE-2021-41773

CVE-2021-41773 Go language poc&exp project. Disclaimer: This project comes from the author's daily study notes. Do not use related technologies and tools for illegal testing. The author shall not be liable for any adverse consequences arising therefrom. Usage: ./main -u Single URL ./main -u -c...

CVE-2017-1000117

CVE-2017-1000117 - PoCs git clone --recurse-submodules "https://github.com/Manouchehri/CVE-2017-1000117.git" cat /tmp/pwned.txt Go go get "github.com/Manouchehri/CVE-2017-1000117" cat /tmp/pwned.txt...

HTTPLoot

HTTPLoot An automated tool which can simultaneously crawl, fill forms, trigger error/debug pages and "loot" secrets out of the client-facing code of sites. Usage To use the tool, you can grab any one of the pre-built binaries from the Releases section of the repository. If you want to build the...

kubescape

Kubescape Comprehensive Kubernetes Security from Development to Runtime Kubescape is an open-source Kubernetes security platform that pr...

tun2socks

Features Universal Proxying : Transparently routes all network traffic from any application through a proxy. Multi-Protocol : Supports HTTP/SOCKS/Shadowsocks/SSH/Relay proxies with optional authentication. Cross-Platform : Runs on Linux/macOS/Windows/FreeBSD/OpenBSD with platform-specific...