Krawl

Krawl A modern, customizable web honeypot server designed to detect and track malicious activity from attackers and web crawlers through deceptive web pages, fake credentials, and canary tokens. Table of Contents Demo What is Krawl? Krawl Dashboard Deployment Modes Krawl Banlist Quickstart Docker...

git-crypt

git-crypt - transparent file encryption in git git-crypt enables transparent encryption and decryption of files in a git repository. Files which you choose to protect are encrypted when committed, and decrypted when checked out. git-crypt lets you freely share a repository containing a mix of...

Anvil

Runtime-first privilege escalation and attack surface assessment for Windows thick clients. Anvil is a runtime-first privilege escalation and attack surface assessment tool for Windows thick client applications. Rather than scanning the filesystem blindly, it pairs Procmon capture with Windows...

fawkes

Fawkes Mythic C2 Agent Fawkes is an entirely vibe-coded Mythic C2 agent. It started as an "I wonder" and has turned into a goal. My goal is to not write a single line of code for this agent, instead, exclusively producing it at a prompt. I originally attempted to write the agent myself, but after...

interrogation-game

Interrogation A voice-based detective interrogation game. You're a detective. Mistral is a suspect who's lying. Your job is to catch the lie through questioning alone. Every case is procedurally generated — a unique white-collar crime, suspect, cover story, and one hidden lie. The suspect is play...

SCRAPPER

🕷️ SCRAPPER by BertUI The Session Observer for Web Automation SCRAPPER isn't a scraper — it's a SESSION OBSERVER that captures your real browser data for use in any automation tool. Built on the BertUI React Framework GitHub: BunElysiaReact/SCRAPY No domain. No cloud. All local. All yours. 📋 Table...

XenoboxX

Hardware Sandbox Toolkit Malware frequently employs anti-VM techniques, which can vary in their difficulty to detect and counteract. While integrating anti-detection measures in our labs is a frequently used option, we should also consider using a real hardware sandbox, even if this sounds weird...

waf-checker

A powerful web application to test how well your Web Application Firewall WAF protects against common attack vectors. → waf-checker.com ← Features Security Testing 19+ attack categories out of the box: SQL Injection, XSS, Path Traversal, Command Injection, SSRF, NoSQL Injection, LFI, LDAP...

layerleak

layerleak the OCI Image Secret Scanner Check CONTRIBUTING.md for contribution guidelines. OCI image secret scanner that works against any public OCI-compliant registry Docker Hub, GHCR, Quay, GCR, MCR, Amazon ECR Public, self-hosted. It analyzes image layers, config metadata, and image history,...

bandjacks

Bandjacks Cyber Threat Defense World Modeling System Overview Bandjacks is a comprehensive cyber threat intelligence CTI system that: Extracts MITRE ATT&CK techniques from threat reports in 12-40 seconds Builds a knowledge graph of threat actors, techniques, and defenses Generates STIX 2.1...

DiaSymbolView

DiaSymbolView DiaSymbolView is a tool for visually inspecting debug information recorded in .pdb files. It relies on MSDIA API and presents a hierarchy of debug symbols and their 200+ properties. You can download the binaries from the releases page. To build the tool yourself, follow instructions...

phishcollector

PhishCollector PhishCollector is a research framework for collecting, analysing, and tracking phishing sites. It is intentionally designed as a starting point — the detection rules, technology signatures, wordlists, and plugins are all plain data structures that researchers are expected to read,...

KslDump

KslDump - BMVD Bring the Microsoft Vulnerable Driver Important context I reported the issue to Microsoft on 7 March 2026. However, almost 20 days earlier, the game-hacking community had already reversed and publicly discussed it. From my side, I do not follow their projects and I was not aware of...

linkedin-extension-fingerprinting

LinkedIn Chrome Extension Fingerprinting LinkedIn silently probes for 2,953 Chrome extensions on every page load. Background This repository documents every extension LinkedIn checks for and provides tools to identify them. Data The complete list of extensions with names and Chrome Web Store link...

radar

Radar Radar is a small but efficient network scanner written in Rust heavily inspired by masscan. These are the main features: Userspace TCP, UDP, DHCP and ARP implementations, thanks to pnet Being asynchronous Randomized IP/ports scanning with no pre-allocation/shuffling Rate limiting Monitor mo...

wxpath

wxpath - declarative web graph traversal with XPath NEW: TUI - Interactive terminal interface powered by Textual for testing wxpath expressions and exporting data. Install Requires Python 3.10+. root@kitploit: pip install wxpath For TUI support: pip install "wxpathtui" Immediately launch the TUI...

profilehound

root@kitploit: / \ / / / / / / / / / // / / / // / / / // / / / / / / / / / / / // / / / / / / // / // / / / / // / // // // ///// ///,// //,/ ProfileHound ProfileHound is a post-escalation tool to help find and achieve red-teaming objectives by locating domain user profiles on machines...

desktop-2fa

🛡️ Desktop-2FA A secure, offline two-factor authentication 2FA manager for desktop environments. Built with Python, featuring strong encryption and no cloud dependencies. 🌐 Landing Page : desktop-2fa.org ✨ Features...

Big-Ass-Data-Broker-Opt-Out-List

Big Ass Data Broker Opt-Out List Symbols| Meanings ---|--- 💐| crucial ☠| high priority 🎫| requires driver’s license cross out your ID ! 📞| must pick up a gasp! phone 💰| site charges money for access or removal whaaaat? This list, also known as BADBOOL, was started in September 2017 and was most...

goodoldsearch-oss

Good Old Search Build precise search queries with exact phrases, site filters, exclusions, date ranges, filetypes, and one-click links across search engines and vertical search targets. This is not a search engine, metasearch aggregator, scraper, or API proxy. It is a local static query builder...