Repositories list

• EntraFalcon

  Public
  A lightweight PowerShell tool for assessing the security posture of Microsoft Entra ID environments. It helps identify privileged objects, risky assignments, a…

  cloudazurepentest-tool+ 4

  cloudazurepentest-toolazureadentraenumeration-toolentra-id

  PowerShell

  •

  MIT License

  •3939 forks•413413 stars•00 issues•00 pull requests•Updated Apr 22, 2026Apr 22, 2026

• pipeleek

  Public
  Pipeleek scans CI/CD logs and artifacts to detect leaked secrets and pivot from them

  githubgitlabattack+ 5

  githubgitlabattackcicdpentestrenovatesecret-scanningpipeleek

  Go

  •

  GNU Affero General Public License v3.0

  •44 forks•1919 stars•66 issues•00 pull requests•Updated Apr 20, 2026Apr 20, 2026

• gitlabhound

  Public
  GitLabHound is a BloodHound OpenGraph collector for GitLab

  gitlabbloodhoundopengraph

  gitlabbloodhoundopengraph

  Go

  •

  Apache License 2.0

  •00 forks•33 stars•00 issues•00 pull requests•Updated Apr 10, 2026Apr 10, 2026

• bRPC-Web

  Public
  Java

  •00 forks•1515 stars•22 issues•00 pull requests•Updated Apr 10, 2026Apr 10, 2026

• bloodhoundce-resources

  Public
  PowerShell

  •99 forks•106106 stars•00 issues•00 pull requests•Updated Feb 24, 2026Feb 24, 2026

• SAMLRaider

  Public
  SAML2 Burp Extension

  samlburp

  samlburp

  Java

  •

  MIT License

  •8383 forks•440440 stars•1414 issues•11 pull request•Updated Feb 24, 2026Feb 24, 2026

• burp-copy-request-response

  Public

  CompassSecurity/burp-copy-request-response’s past year of commit activity
  Burp extension for quickly copying request/response data.

  Java

  •1818 forks•3131 stars•11 issue•00 pull requests•Updated Feb 12, 2026Feb 12, 2026

• deviceCode2SecurityKey

  Public archive
  PoC to add a security key to Entra ID via device code phishing

  Python

  •00 forks•1111 stars•11 issue•00 pull requests•Updated Feb 3, 2026Feb 3, 2026

• JimagePatcher

  Public archive

  CompassSecurity/JimagePatcher’s past year of commit activity
  Recreate jimage files from extracted jimages.

  Java

  •00 forks•66 stars•00 issues•00 pull requests•Updated Feb 3, 2026Feb 3, 2026

• impacket-mssqlshell

  Public archive

  CompassSecurity/impacket-mssqlshell’s past year of commit activity
  Impacket is a collection of Python classes for working with network protocols.

  Python

  •

  Other

  •3.9k3.9k forks•00 stars•00 issues•00 pull requests•Updated Feb 3, 2026Feb 3, 2026

• impacket

  Public archive
  Impacket is a collection of Python classes for working with network protocols.

  Python

  •

  Other

  •3.9k3.9k forks•1717 stars•00 issues•00 pull requests•Updated Feb 3, 2026Feb 3, 2026

• SharpHound3

  Public archive
  C# Data Collector for the BloodHound Project, Version 3

  C#

  •

  GNU General Public License v3.0

  •151151 forks•00 stars•00 issues•00 pull requests•Updated Feb 3, 2026Feb 3, 2026

• xvulnhuntr

  Public archive
  Zero shot vulnerability discovery using LLMs

  Python

  •

  GNU Affero General Public License v3.0

  •304304 forks•1212 stars•00 issues•00 pull requests•Updated Feb 3, 2026Feb 3, 2026

• BloodHoundQueries

  Public archive
  Python

  •8181 forks•764764 stars•11 issue•00 pull requests•Updated Feb 3, 2026Feb 3, 2026

• PowerLsassSilentProcessExit

  Public archive
  PowerShell

  •77 forks•2727 stars•00 issues•00 pull requests•Updated Feb 3, 2026Feb 3, 2026

• Bluetooth_Low_Energy_BLE

  Public archive
  33 forks•2828 stars•00 issues•00 pull requests•Updated Feb 3, 2026Feb 3, 2026

• DECEEF77

  Public archive
  DCF77 Piraten Sender

  C++

  •00 forks•11 star•00 issues•00 pull requests•Updated Feb 3, 2026Feb 3, 2026

• WMBus-Sniffer-MUC

  Public archive
  Source code of the demonstration programs showed in the Black Hat '13 presentation "Energy fraud and orchestrated blackouts: Issues with wireless metering proto…

  Go

  •

  BSD 3-Clause "New" or "Revised" License

  •1010 forks•11 star•00 issues•00 pull requests•Updated Feb 3, 2026Feb 3, 2026

• PurpleOps

  Public
  An open-source self-hosted purple team management web application.

  Python

  •

  Other

  •5454 forks•2727 stars•55 issues•00 pull requests•Updated Dec 10, 2025Dec 10, 2025

• security_resources

  Public
  Collection of online security resources

  6060 forks•289289 stars•00 issues•22 pull requests•Updated Oct 30, 2025Oct 30, 2025

• CollaboRaider

  Public
  An improved version of the CollaboratorEverywhere Burp extension

  Java

  •

  MIT License

  •44 forks•88 stars•00 issues•00 pull requests•Updated Sep 2, 2025Sep 2, 2025

• jwt-scanner

  Public
  JWT-scanner Burp Extension

  Java

  •

  MIT License

  •77 forks•6161 stars•11 issue•00 pull requests•Updated May 12, 2025May 12, 2025

• TokenPhisher

  Public
  JavaScript

  •

  MIT License

  •33 forks•2626 stars•00 issues•00 pull requests•Updated Feb 11, 2025Feb 11, 2025

• mssqlrelay

  Public
  Tool for MSSQL relay audit and abuse

  Python

  •

  MIT License

  •99 forks•5959 stars•00 issues•00 pull requests•Updated Dec 17, 2024Dec 17, 2024

• conkeyscan

  Public
  A Pentesters Confluence Keyword Scanner

  scannerconfluencekeyword-extraction

  scannerconfluencekeyword-extraction

  Python

  •

  MIT License

  •33 forks•1717 stars•00 issues•11 pull request•Updated Dec 3, 2024Dec 3, 2024

• bapp-downloader

  Public
  Script for downloading Burp Suite extension files

  Python

  •33 forks•1111 stars•00 issues•22 pull requests•Updated Jan 29, 2024Jan 29, 2024

• TokenTormentor

  Public archive
  Python

  •

  MIT License

  •22 forks•1010 stars•11 issue•00 pull requests•Updated Oct 18, 2023Oct 18, 2023

• Hacking_Tools_Cheat_Sheet

  Public
  Shell

  •115115 forks•772772 stars•00 issues•00 pull requests•Updated Sep 20, 2023Sep 20, 2023

• Readinizer

  Public
  Microsoft GPO Readiness Lateral Movement Detection Tool

  C#

  •

  MIT License

  •88 forks•1616 stars•00 issues•33 pull requests•Updated Dec 8, 2022Dec 8, 2022

• ThreatFoxImporter

  Public
  00 forks•11 star•00 issues•00 pull requests•Updated Dec 6, 2022Dec 6, 2022