redteam

Hunt down social media accounts by username across social networks

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.

E-mails, subdomains and names Harvester - OSINT

Web path scanner

Adversary simulation and Red teaming platform with AI

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

generate CobaltStrike's cross-platform payload

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

A self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an LLM agent drive analysis end to end.

Username tools for penetration testing

An offensive/defense security toolset for discovery, recon and ethical assessment of AI Agents

World's most accurate password guessing AI tool. A PyTorch implementation of PassLLM (USENIX 2025) that leverages PII and LoRA fine-tuning to outperform existing tools by over 45% on consumer hardware.

Research framework that quantifies how steganographic obfuscation of embeddings defeats off-the-shelf statistical detection in RAG pipelines, paired with the VectorPin cryptographic-provenance defense