security-research-tool

LockKnife: The Ultimate Android Security Research Tool. A unified TUI workspace and headless CLI for deep Android security research, built for researchers and hackers. Powered by Python orchestration and a Rust-accelerated core, enabling AI agent–driven hacking, credential recovery/cracking, APK analysis, intelligence gathering, runtime inspection.

小liu破甲 - Codex CLI jailbreak prompt and one-click deploy tool. 基于CTF框架的Codex破甲提示词与一键部署工具

Test and evaluate Large Language Models against prompt injections, jailbreaks, and adversarial attacks with a web-based interactive lab.

UnderBOSS is an advanced Android RAT (Remote Administration Tool) with 80+ commands for penetration testing, device surveillance, hardware control, and security assessment. Features include camera access, location tracking, keylogging, flashlight effects, volume manipulation, SMS/Call control, and persistence mechanisms for authorized activity

HackDork is an automated Google Dorking tool that utilizes Playwright to perform reconnaissance by extracting potential links from search engine results.

Advanced Discord token recovery framework for Windows. Extracts tokens from 20+ Chromium browsers, Firefox, and Discord clients via AES-GCM/DPAPI decryption. Features parallel validation, webhook delivery with fallback, stealth mode, custom EXE icon builds, and full JSON configuration.

ParamScout is an advanced HTTP parameter discovery tool that combines intelligent anomaly detection, passive intelligence gathering from Wayback Machine, CommonCrawl, and OTX, with multi-method support (GET, POST, JSON, XML) to uncover hidden and vulnerable parameters in web applications efficiently and stealthily.

Educational cross-platform LSB steganography tool for cybersecurity awareness, digital forensics, and hidden data research.

An educational recon and OSINT tool suite

An advanced open-source image forensics & OSINT utility engineered to extract 22+ deep structural parameters, dynamic metadata analytics, and cryptographic fingerprints from media files, screenshots, and social media compressed containers. Created by Azhar (HCO Team).

UGM-133: Advanced 10-Layer DDoS testing tool for security professionals. Multi-vector attack engine with async architecture, IP spoofing, amplification, WebSocket/SIP floods, and slow-layer attacks. Educational cybersecurity research only. Full OSI layer penetration testing simulation. Python-based.

RFuZZ. Find what others miss.

Open, vendor-neutral EMV 3-D Secure protocol lab for researchers, payment engineers, and educators to visualize browser and app flows, compare spec versions, and inspect trust boundaries.

PRISM-VD is a SOTA framework for C/C++ vulnerability detection. It combines ATLAS multi-view graphs, novel DSG pruning, USCP causal paths, and advanced GNNs/LLMs for highly accurate security assessments.