Automated Firebase recon and security scanner. Extracts from APKs, IPAs or web and checks for unauthorized read and write access on Firestore, Realtime Database, Storage buckets, Remote Config, Cloud Functions, and detects hardcoded service account keys.
☆65Jul 17, 2026Updated last month
Alternatives and similar repositories for OpenFirebase
Users that are interested in OpenFirebase are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A Python-Based Tool for Reconnaissance and State Management of AD Principals☆27Apr 8, 2026Updated 5 months ago
- ⚡ SheetStrike - Weaponize Excel files for red team operations. Inject stealthy tracking pixels and NTLMv2 hash capture payloads into XLSX…☆22Dec 23, 2025Updated 8 months ago
- ☆17Apr 10, 2026Updated 5 months ago
- FrontHunter is a tool for testing large lists of domains to identify candidates for domain fronting.☆22May 5, 2025Updated last year
- A simple OAuth App designed to capture OAuth tokens when users authenticate through GitHub OAuth flow.☆27Apr 20, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A stealthy stager designed for shellcode payloads staged with http/https like Sliver, or on github raw.☆60Jul 20, 2026Updated last month
- Collection of Semgrep rules for security analysis☆10Mar 30, 2024Updated 2 years ago
- SMB Audit Tool you were looking for☆25Jun 16, 2023Updated 3 years ago
- MCP server for .NET reverse engineering workflows (dnSpy/ILSpy ecosystem), built in C#.☆42Mar 25, 2026Updated 5 months ago
- Burp extension to automatically drop requests that match a certain regex.☆10Mar 10, 2023Updated 3 years ago
- ☆194Oct 21, 2025Updated 10 months ago
- C# to read WIM files over the network without transferring the whole file☆40Jan 22, 2026Updated 7 months ago
- In-memory BOF implementation of Silent Process Exit LSASS dump via RtlReportSilentProcessExit☆19Apr 14, 2026Updated 4 months ago
- A QoL tool to obfuscate shellcode.☆28Jun 2, 2026Updated 3 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Bypassing EDR's with stealthy c++ telegram Bot and Telegram itself as C2 interface !☆44Mar 24, 2026Updated 5 months ago
- InfraGuard is a Command & Control Redirection Proxy and Manager which protects your Red Team Infrastructure against threat attribution☆314Aug 22, 2026Updated 2 weeks ago
- AWS SSO Device-Code Phishing Toolkit for Red / Purple Teams☆23Mar 10, 2026Updated 6 months ago
- Exhaustive search and flexible filtering of Active Directory ACEs.☆82Jul 21, 2026Updated last month
- 🎯 Pi 5 Wardriving & Wireless Pentest Platform | WiFi/BLE/SDR Attacks | WPA3 • Evil Twin • Karma • Evilginx | GPS Mapping | Cloud Crackin…☆30Jul 17, 2026Updated last month
- Dump LSASS process in Task Manager without triggering Defender.☆18Apr 6, 2023Updated 3 years ago
- An open-source Linux GUI-based Remote Access Tool developed in C# with a Python payload, intended for legitimate penetration testing and …☆33Mar 9, 2026Updated 6 months ago
- Manipulation of Toast Notifications to social engineer the user to visit links, harvest credentials etc.☆48Mar 24, 2026Updated 5 months ago
- Object file loader implemented as a post-ex DLL for asynchronous BOF execution.☆29Jul 23, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 🧠 The ultimate resource for finding Beacon Object Files (BOFs).☆160Updated this week
- Converts a hostname (or URI) to IP address using your local resolver☆26Mar 31, 2024Updated 2 years ago
- Pythonize Intruder Payload☆13Dec 15, 2020Updated 5 years ago
- Obtain emails using the LinkedIn Graph API☆11Oct 1, 2025Updated 11 months ago
- String or worldlist encoder for use in fuzzing or web application testing☆19Sep 2, 2019Updated 7 years ago
- A security research tool for enabling Chrome DevTools Protocol (CDP) debugging on Microsoft Edge browser processes at runtime.☆26Jan 2, 2026Updated 8 months ago
- Materials for CVE-2024-30052.☆12Oct 4, 2024Updated last year
- Noradrenaline is a collection of high-performance post-exploitation shared libraries designed for native execution on macOS and Linux end…☆31Sep 1, 2026Updated last week
- gpoParser is a tool designed to extract and analyze configurations applied through Group Policy Objects (GPOs) in an Active Directory env…☆374Apr 28, 2026Updated 4 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Azure Blob Storage C2 Profile for Mythic☆30Jan 30, 2026Updated 7 months ago
- ☆17Aug 17, 2025Updated last year
- Convert Microsoft Defender Antivirus Signatures (VDM) into SQL DB☆30Nov 21, 2025Updated 9 months ago
- Study notes on Windows NTLM Reflection and token stealing based EOPs.☆20May 5, 2021Updated 5 years ago
- MCPwned is a companion extension that enables pentesters to effectively test MCP servers. It recognizes MCP-like endpoints, provies a sca…☆20Jul 3, 2026Updated 2 months ago
- Unauthenticated start EFS service on remote Windows host (make PetitPotam great again)☆150Oct 23, 2025Updated 10 months ago
- Janus analyzes C2 telemetry to surface failure patterns, operator friction, and automation opportunities across engagements.☆58Jun 23, 2026Updated 2 months ago