Repositories list

• TRON

  Public
  Windows Trojan & Reverse-Shell Generator Tool

  rustreverse-shellpowershell+ 12

  rustreverse-shellpowershellhackingpenetration-testingevasionhacking-toolmeterpreterethical-hackingpenetration-testing-tools+ 5

  Shell

  •

  MIT License

  •00 forks in twelvesec/TRON•99 stars in twelvesec/TRON•00 issues in twelvesec/TRON•00 pull requests in twelvesec/TRON•Updated Oct 23, 2026Oct 23, 2026

• Skarvel

  Public
  Hunt malicious git repositories.

  Go

  •

  GNU General Public License v3.0

  •00 forks in twelvesec/Skarvel•77 stars in twelvesec/Skarvel•00 issues in twelvesec/Skarvel•00 pull requests in twelvesec/Skarvel•Updated Oct 22, 2026Oct 22, 2026

• Crymium

  Public
  Chromium Based Browser - Credential Harvester

  C++

  •00 forks in twelvesec/Crymium•55 stars in twelvesec/Crymium•00 issues in twelvesec/Crymium•00 pull requests in twelvesec/Crymium•Updated May 6, 2026May 6, 2026

• PwnPad

  Public
  PwnPad is an affordable, hands-on hardware hacking platform built for practical learning. It features a range of challenges that walk users through key hardware…

  C++

  •

  GNU General Public License v3.0

  •110110 forks in twelvesec/PwnPad•1.2k1.2k stars in twelvesec/PwnPad•44 issues in twelvesec/PwnPad•11 pull request in twelvesec/PwnPad•Updated Dec 5, 2025Dec 5, 2025

• PwnPadWiki

  Public
  PwnPad Wiki – Centralized documentation, guides, and tutorials for PwnPad. Perfect for setup, usage, and reference material contributed by the community.

  11 fork in twelvesec/PwnPadWiki•99 stars in twelvesec/PwnPadWiki•00 issues in twelvesec/PwnPadWiki•00 pull requests in twelvesec/PwnPadWiki•Updated Dec 5, 2025Dec 5, 2025

• BSides-Athens-2025-Badge

  Public
  C++

  •00 forks in twelvesec/BSides-Athens-2025-Badge•22 stars in twelvesec/BSides-Athens-2025-Badge•00 issues in twelvesec/BSides-Athens-2025-Badge•00 pull requests in twelvesec/BSides-Athens-2025-Badge•Updated Jul 1, 2025Jul 1, 2025

• port-forwarding

  Public
  Tunneling and Port Forwarding Cheat Sheet

  GNU General Public License v3.0

  •2222 forks in twelvesec/port-forwarding•167167 stars in twelvesec/port-forwarding•00 issues in twelvesec/port-forwarding•11 pull request in twelvesec/port-forwarding•Updated Apr 12, 2023Apr 12, 2023

• RogueLDAP

  Public
  A lightweight rogue LDAP server which is a modified version of the JNDIExploit-1

  ldapexploitrogue+ 1

  ldapexploitroguejndi

  Java

  •44 forks in twelvesec/RogueLDAP•88 stars in twelvesec/RogueLDAP•00 issues in twelvesec/RogueLDAP•00 pull requests in twelvesec/RogueLDAP•Updated Dec 9, 2022Dec 9, 2022

• rootend

  Public
  A *nix Enumerator & Auto Privilege Escalation tool.

  linuxunixtool+ 5

  linuxunixtoolhackingenumeratorescalationprivilegehackthebox

  Python

  •

  GNU General Public License v3.0

  •1919 forks in twelvesec/rootend•151151 stars in twelvesec/rootend•00 issues in twelvesec/rootend•00 pull requests in twelvesec/rootend•Updated Nov 19, 2021Nov 19, 2021

• django-DefectDojo

  Public
  DefectDojo is an open-source application vulnerability correlation and security orchestration tool.

  HTML

  •

  BSD 3-Clause "New" or "Revised" License

  •2k2k forks in twelvesec/django-DefectDojo•00 stars in twelvesec/django-DefectDojo•00 issues in twelvesec/django-DefectDojo•00 pull requests in twelvesec/django-DefectDojo•Updated Sep 30, 2021Sep 30, 2021

• maraki1982

  Public
  C#

  •

  GNU General Public License v3.0

  •22 forks in twelvesec/maraki1982•99 stars in twelvesec/maraki1982•00 issues in twelvesec/maraki1982•00 pull requests in twelvesec/maraki1982•Updated Jun 19, 2021Jun 19, 2021

• gasmask

  Public
  Information gathering tool - OSINT

  osintinformation-gatheringreconnaissance

  osintinformation-gatheringreconnaissance

  Python

  •

  GNU General Public License v3.0

  •180180 forks in twelvesec/gasmask•1.5k1.5k stars in twelvesec/gasmask•33 issues in twelvesec/gasmask•44 pull requests in twelvesec/gasmask•Updated Jun 11, 2021Jun 11, 2021

• passcat

  Public
  Passwords Recovery Tool

  credentialssecretspentesting+ 7

  credentialssecretspentestingpasswordspentestpassword-retrievalredteamingredteampassword-recoverycredentials-gathering

  C

  •

  GNU General Public License v3.0

  •7575 forks in twelvesec/passcat•236236 stars in twelvesec/passcat•44 issues in twelvesec/passcat•11 pull request in twelvesec/passcat•Updated Feb 3, 2021Feb 3, 2021

• roben

  Public
  Robots entries parser and brute forcer.

  Python

  •

  GNU General Public License v3.0

  •11 fork in twelvesec/roben•22 stars in twelvesec/roben•00 issues in twelvesec/roben•00 pull requests in twelvesec/roben•Updated Nov 16, 2020Nov 16, 2020

• CobaltStrike

  Public
  CobaltStrike's source code

  Java

  •1k1k forks in twelvesec/CobaltStrike•00 stars in twelvesec/CobaltStrike•00 issues in twelvesec/CobaltStrike•00 pull requests in twelvesec/CobaltStrike•Updated Oct 30, 2020Oct 30, 2020

• GitDorker

  Public
  A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

  Python

  •440440 forks in twelvesec/GitDorker•00 stars in twelvesec/GitDorker•00 issues in twelvesec/GitDorker•00 pull requests in twelvesec/GitDorker•Updated Oct 16, 2020Oct 16, 2020

• GHunt

  Public
  🕵️‍♂️ Investigate Google Accounts with emails.

  Python

  •

  Mozilla Public License 2.0

  •1.7k1.7k forks in twelvesec/GHunt•33 stars in twelvesec/GHunt•00 issues in twelvesec/GHunt•00 pull requests in twelvesec/GHunt•Updated Oct 15, 2020Oct 15, 2020

• eternalblue_win7_auto_gen

  Public
  Shell

  •

  GNU General Public License v3.0

  •11 fork in twelvesec/eternalblue_win7_auto_gen•77 stars in twelvesec/eternalblue_win7_auto_gen•00 issues in twelvesec/eternalblue_win7_auto_gen•00 pull requests in twelvesec/eternalblue_win7_auto_gen•Updated Aug 7, 2020Aug 7, 2020

• PayloadsAllTheThings

  Public
  A list of useful payloads and bypass for Web Application Security and Pentest/CTF

  Python

  •

  MIT License

  •18k18k forks in twelvesec/PayloadsAllTheThings•44 stars in twelvesec/PayloadsAllTheThings•00 issues in twelvesec/PayloadsAllTheThings•00 pull requests in twelvesec/PayloadsAllTheThings•Updated Mar 9, 2020Mar 9, 2020

• at-ps

  Public
  Adversary Tactics - PowerShell Training

  PowerShell

  •

  Other

  •340340 forks in twelvesec/at-ps•11 star in twelvesec/at-ps•00 issues in twelvesec/at-ps•00 pull requests in twelvesec/at-ps•Updated Jan 22, 2020Jan 22, 2020

• dexter

  Public
  Data EXfiltration TestER

  securitypentestingpentest+ 4

  securitypentestingpentestred-teamdata-exfiltrationblue-teamred-teaming

  C

  •

  GNU General Public License v3.0

  •55 forks in twelvesec/dexter•2121 stars in twelvesec/dexter•00 issues in twelvesec/dexter•00 pull requests in twelvesec/dexter•Updated Aug 28, 2019Aug 28, 2019

• JDSer-DComp

  Public
  A Burp Extender plugin that will allow you to tamper with requests containing compressed, serialized java objects.

  javaburpextender+ 4

  javaburpextenderserializeintruderburp-extensionstamper

  Java

  •

  GNU Affero General Public License v3.0

  •88 forks in twelvesec/JDSer-DComp•2424 stars in twelvesec/JDSer-DComp•11 issue in twelvesec/JDSer-DComp•00 pull requests in twelvesec/JDSer-DComp•Updated Mar 1, 2019Mar 1, 2019

• BearerAuthToken

  Public
  This burpsuite extender provides a solution on testing Enterprise applications that involve security Authorization tokens into every HTTP requests.Furthermore, …

  authorizationburpburpsuite+ 2

  authorizationburpburpsuiteburp-extensionsburpsuite-extender

  1313 forks in twelvesec/BearerAuthToken•5050 stars in twelvesec/BearerAuthToken•00 issues in twelvesec/BearerAuthToken•00 pull requests in twelvesec/BearerAuthToken•Updated Feb 27, 2019Feb 27, 2019

• bluenotes

  Public
  Powershell notes on Windows.

  windowssecuritypowershell+ 5

  windowssecuritypowershellnotesscriptscommandsaudithardening

  GNU General Public License v3.0

  •77 forks in twelvesec/bluenotes•77 stars in twelvesec/bluenotes•00 issues in twelvesec/bluenotes•00 pull requests in twelvesec/bluenotes•Updated Apr 30, 2018Apr 30, 2018

• lapse-plus

  Public
  LAPSE+ is a security scanner, based on the white box analysis of code for detecting vulnerabilities in Java EE Applications.

  Java

  •

  GNU General Public License v3.0

  •1414 forks in twelvesec/lapse-plus•22 stars in twelvesec/lapse-plus•00 issues in twelvesec/lapse-plus•00 pull requests in twelvesec/lapse-plus•Updated Mar 26, 2018Mar 26, 2018

• panicbutton

  Public
  Windows application aiming to preserve cryptographic information used by ransomware operations. If you suspect a ransomware is running on your pc, then hit the …

  windowsencryptionmemory+ 2

  windowsencryptionmemoryransomwarepanic-button

  C++

  •

  GNU General Public License v3.0

  •88 forks in twelvesec/panicbutton•3131 stars in twelvesec/panicbutton•22 issues in twelvesec/panicbutton•00 pull requests in twelvesec/panicbutton•Updated Jul 6, 2017Jul 6, 2017