Seguridad · GitHub

Gram is Klarna's own threat model diagramming tool

• Fully featured diagramming tool specialized for threat modeling.
• Collaborative editing with multiple users over websocket

A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.

XSScope is one of the most powerful and advanced GUI Framework for Modern Browser exploitation via XSS.

• Perform XSS botnet attack(s). Every victim who is affected by XSS payload (in the webserver), will contantly bind the payload and wait for commands from attacker. A bind payload is one that waits for a connection from its controller.
• HTTP Flood (DDos) via XSS botnets

C# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can later be weaponized during Red Team Operations to evade EDR's.

OpenAnt from Knostic is the leading open source LLM-based vulnerability discovery and remediation product, helping defenders proactively find and patch verified security flaws while minimizing both false positives and negatives. Stage 1 detects. Stage 2 attacks. What survives is real.

🛡️ Comprehensive Cybersecurity Arsenal, Bug Bounty Payloads & Security Audit Tools by IKONA ONI

• 🗂️ IKONA Arsenal & Master Modules: Automated and manual web security testing scripts.
• 💥 Web Exploitation & Payloads: Payloads for XSS, SQLi, SSRF, SSTI, JWT, IDOR, Race Conditions, CRLF, and Command Injection.

Semi-automatic OSINT framework and package manager

Fast, private, modern sandbox designed for desktop Linux

Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin.

Checklist for container security - devsecops practices

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Oculta secretos de forma segura en texto plano mediante caracteres invisibles y contraseñas 🧙🏻‍♂️⭐

• Protect your invisible secret using passwords and HMAC integrity
• Cryptographically secure by encrypting the invisible secret using AES-256-CTR.

An offline multi-tool Android app for hiking, backpacking, camping, wilderness survival, foraging, and hunting.

• Navigate using beacons (waypoints), paths, and bearings
• Retrace your steps with backtrack

You can get a lifetime of FREE VPS using GitHub Codespaces with Kali Linux Docker image installed on github workspace terminal. (beginner, friendly useful for bughunter and pentester)