Netlogon and CLDAP vulnerability research with a proof of concept.
AI-powered authorized security testing workspace. Maintained on the release branch (NestJS + Ink TUI + Web/Desktop).
Secrets Find0r is a multithreaded SMB share crawler that hunts for exposed credentials and secrets across Windows networks. It enumerates shares, recursively scans files with regex/keyword rules, highlights matched tokens on screen, and exports clean ASCII tables. Supports DOCX/PDF/legacy Office and depth limits.
Advanced mobile security research platform for authorized testing and educational purposes
AI 辅助的授权渗透测试平台（基于 Ed1s0nZ/CyberStrikeAI 二次开发）：单/多智能体交战、本地近5年 CVE 语料与每日增量同步、GitHub-C2 交接、经验总结人审入库、HITL 审批与审计。
WebSource Harvester is an educational web-source harvester that crawls a site (BFS, depth-controlled), downloads browser-visible assets (HTML, CSS, JS, images, fonts, PDFs), and rewrites paths so pages work offline, including nested routes. It enforces same-origin limits and is designed for learning, offline analysis, and safe portfolio demos.
Open-source, self-hostable AppSec agent that finds, proves, and helps fix web/API vulnerabilities — evidence-first (independent validation, proof-of-exploit over CVSS lists) behind a deterministic allowlist→scope→risk→policy→audit safety pipeline. Bring your own LLM or run fully local.
Powerful Python SSH brute force tool with multi-threaded architecture, advanced honeypot detection, real-time statistics, and system reconnaissance. Perfect for authorized security testing and penetration testing.
Encoding-transformation utility for authorized testing, defensive validation and controlled lab learning.
Credential Reuse0r is a fast, multithreaded offensive security tool for testing credential reuse across multiple network services, especially in Windows Active Directory environments.
AI 小秘 (aimy-skill) v3 · 授权范围内的侦察与 Web 漏洞检测插件 for DeepSeek Harness｜8 个原生工具 + 8 个中文技能 · 默认拒绝的授权范围护栏 · 只做检测、零运行时依赖。再开发自 zxz0119/aimy-sikll。
Red team reconnaissance and vulnerability-testing framework with Nuclei and Metasploit integration. For authorized engagements only.
Self-hosted AI security lab with fresh LXD workspaces and OpenCode-powered authorized testing
Stress-testing & web security recon toolkit load testing, proxy rotation, login automation, and vulnerability scanning.
RTSP Brute Force Tool: A powerful utility for security testing of RTSP services through systematic credential brute forcing, designed for ethical hacking and educational purposes.
SMB Inspect0r is a fast multithreaded Python tool to scan networks for accessible SMB shares, supporting both anonymous and authenticated logins. Features include progress tracking, and detailed output of discovered shares.
A lightweight Rust CLI for authorized JWT security testing and lab use.
Discover 200+ CTF and bug bounty payloads with 8 categories for fast testing, research, and exploit development
AD-Descript0r is a Python tool for Active Directory reconnaissance. It authenticates against a Domain Controller, retrieves all usernames and their descriptions, and displays the results in a clean table with colored output
Text an authorized recon from your phone. Hermes loads 818 cybersecurity playbooks and plans; every live probe waits for your yes on Latch.
To associate your repository with the authorized-testing topic, visit your repo's landing page and select "manage topics."