domain: penetration-testing

1317 products, primary matches first, then adoption-weighted; health v2 shown.

Product	Health v2	Stars	Maturity
utkusen/promptmap promptmap2 is an automated prompt injection scanner for custom LLM applications, supporting white-box testing of system prompts and black-b…	53	1254	active
trailofbits/anamorpher Anamorpher is a tool for crafting and visualizing image scaling attacks that hide multi-modal prompt injections in images, revealed only wh…	55	1075	active
mitmproxy/android-unpinner A Python CLI tool that removes certificate pinning from Android APKs so traffic can be intercepted with mitmproxy, without requiring a root…	54	1032	active
greatscottgadgets/facedancer A Python library for emulating USB devices using hardware peripherals like Cynthion or GreatFET. It also supports MITM proxying of USB conn…	83	1010	active
martinvigo/email2phonenumber A Python OSINT tool that discovers a target's phone number from just their email address by abusing password reset flows that leak masked p…	32	2747	maintenance
kgretzky/pwndrop pwndrop is a self-deployable file hosting service aimed at red teamers, letting users upload and share payloads over HTTP, HTTPS, and WebDA…	23	2279	maintenance
initstring/cloud_enum A Python command-line OSINT tool that enumerates publicly exposed resources across AWS, Azure, and Google Cloud using keyword mutations and…	79	2132	maintenance
greatscottgadgets/ubertooth Ubertooth is an open source wireless development platform for Bluetooth experimentation, providing host software, firmware, and hardware de…	56	2125	maintenance
firmadyne/firmadyne FIRMADYNE is an automated, scalable platform for emulating and dynamically analyzing Linux-based embedded firmware using QEMU with instrume…	32	2102	maintenance
citronneur/rdpy RDPY is a pure Python implementation of the Microsoft Remote Desktop Protocol (RDP) built on the Twisted event-driven network engine, suppo…	32	1733	maintenance
gwen001/github-search A collection of Python, PHP, and Bash scripts that perform targeted searches on GitHub via its search API to find secrets, keys, private re…	23	1511	maintenance
ptswarm/reFlutter A Python-based framework that repacks Flutter Android and iOS apps with a patched Flutter engine library to enable dynamic analysis. It red…	10	1463	maintenance
hubert3/iSniff-GPS iSniff-GPS is a passive WiFi sniffing tool that captures SSID probes, ARPs, and MDNS packets from nearby iOS devices to infer their previou…	32	1288	maintenance
sh4hin/Androl4b AndroL4b is an Ubuntu MATE-based virtual machine preloaded with Android security, reverse engineering, and malware analysis tools such as R…	32	1166	maintenance
samyk/keysweeper KeySweeper is an open-source, open-hardware Arduino-based device disguised as a USB wall charger that passively sniffs, decrypts, and logs …	32	1127	maintenance
ajinabraham/CMSScan CMSScan is a self-hosted security dashboard that scans WordPress, Drupal, Joomla, and vBulletin websites for vulnerabilities by wrapping wp…	32	1078	maintenance
NoDataFound/hackGPT hackGPT is a Python/Jupyter-based chatbot application that leverages OpenAI and ChatGPT APIs for security-oriented tasks like malware analy…	75	1202	experimental