Automated Firebase recon and security scanner. Extracts from APKs, IPAs or web and checks for unauthorized read and write access on Firestore, Realtime Database, Storage buckets, Remote Config, Cloud Functions, and detects hardcoded service account keys.
☆59Jul 17, 2026Updated last week
Alternatives and similar repositories for OpenFirebase
Users that are interested in OpenFirebase are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A Python-Based Tool for Reconnaissance and State Management of AD Principals☆26Apr 8, 2026Updated 3 months ago
- ⚡ SheetStrike - Weaponize Excel files for red team operations. Inject stealthy tracking pixels and NTLMv2 hash capture payloads into XLSX…☆22Dec 23, 2025Updated 7 months ago
- ☆17Apr 10, 2026Updated 3 months ago
- FrontHunter is a tool for testing large lists of domains to identify candidates for domain fronting.☆22May 5, 2025Updated last year
- A simple OAuth App designed to capture OAuth tokens when users authenticate through GitHub OAuth flow.☆25Apr 20, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A stealthy stager designed for shellcode payloads staged with http/https like Sliver, or on github raw.☆59Jul 20, 2026Updated last week
- Wordpress 5.8.2 CVE-2022-21661 Vuln enviroment POC exploit☆14May 28, 2022Updated 4 years ago
- Collection of Semgrep rules for security analysis☆10Mar 30, 2024Updated 2 years ago
- SMB Audit Tool you were looking for☆25Jun 16, 2023Updated 3 years ago
- MCP server for .NET reverse engineering workflows (dnSpy/ILSpy ecosystem), built in C#.☆40Mar 25, 2026Updated 4 months ago
- Burp extension to automatically drop requests that match a certain regex.☆10Mar 10, 2023Updated 3 years ago
- ☆193Oct 21, 2025Updated 9 months ago
- C# to read WIM files over the network without transferring the whole file☆40Jan 22, 2026Updated 6 months ago
- In-memory BOF implementation of Silent Process Exit LSASS dump via RtlReportSilentProcessExit☆19Apr 14, 2026Updated 3 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- A QoL tool to obfuscate shellcode.☆26Jun 2, 2026Updated last month
- InfraGuard is a Command & Control Redirection Proxy and Manager which protects your Red Team Infrastructure against threat attribution☆162Jul 15, 2026Updated 2 weeks ago
- Bypassing EDR's with stealthy c++ telegram Bot and Telegram itself as C2 interface !☆43Mar 24, 2026Updated 4 months ago
- AWS SSO Device-Code Phishing Toolkit for Red / Purple Teams☆23Mar 10, 2026Updated 4 months ago
- Exhaustive search and flexible filtering of Active Directory ACEs.☆82Jul 21, 2026Updated last week
- 🎯 Pi 5 Wardriving & Wireless Pentest Platform | WiFi/BLE/SDR Attacks | WPA3 • Evil Twin • Karma • Evilginx | GPS Mapping | Cloud Crackin…☆25Jul 17, 2026Updated last week
- Dump LSASS process in Task Manager without triggering Defender.☆18Apr 6, 2023Updated 3 years ago
- An open-source Linux GUI-based Remote Access Tool developed in C# with a Python payload, intended for legitimate penetration testing and …☆33Mar 9, 2026Updated 4 months ago
- Manipulation of Toast Notifications to social engineer the user to visit links, harvest credentials etc.☆47Mar 24, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 🧠 The ultimate resource for finding Beacon Object Files (BOFs).☆150Updated this week
- Object file loader implemented as a post-ex DLL for asynchronous BOF execution.☆29Updated this week
- Converts a hostname (or URI) to IP address using your local resolver☆26Mar 31, 2024Updated 2 years ago
- A security research tool for enabling Chrome DevTools Protocol (CDP) debugging on Microsoft Edge browser processes at runtime.☆22Jan 2, 2026Updated 6 months ago
- Pythonize Intruder Payload☆13Dec 15, 2020Updated 5 years ago
- Obtain emails using the LinkedIn Graph API☆11Oct 1, 2025Updated 9 months ago
- String or worldlist encoder for use in fuzzing or web application testing☆19Sep 2, 2019Updated 6 years ago
- Materials for CVE-2024-30052.☆12Oct 4, 2024Updated last year
- Noradrenaline is a collection of high-performance post-exploitation shared libraries designed for native execution on macOS and Linux end…☆29Jul 6, 2026Updated 3 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- gpoParser is a tool designed to extract and analyze configurations applied through Group Policy Objects (GPOs) in an Active Directory env…☆367Apr 28, 2026Updated 3 months ago
- Azure Blob Storage C2 Profile for Mythic☆30Jan 30, 2026Updated 5 months ago
- ☆17Aug 17, 2025Updated 11 months ago
- A set of scripts to facilitate HTTP interception on mobile apps☆25Mar 11, 2026Updated 4 months ago
- Convert Microsoft Defender Antivirus Signatures (VDM) into SQL DB☆29Nov 21, 2025Updated 8 months ago
- Study notes on Windows NTLM Reflection and token stealing based EOPs.☆20May 5, 2021Updated 5 years ago
- MCPwned is a companion extension that enables pentesters to effectively test MCP servers. It recognizes MCP-like endpoints, provies a sca…☆20Jul 3, 2026Updated 3 weeks ago