Security
5,347 items in 29 lists
-
VirtFuzz github.com
(2024) - A LibAFL-based Linux kernel fuzzer that injects inputs through VirtIO devices to test wireless stacks.
-
talking-with-cars github.com
CAN related scripts, and scripts to use a car as a gamepad
-
stegextract github.com
Detect hidden files and text in images.
-
Android OpenDebug github.com
make any application on the device debuggable (using Cydia Substrate).
-
NotifySecurity github.com
-
Recomposer github.com
-
autocrack github.com
Hashcat wrapper to help automate the cracking process.
-
ELFCrypt github.com
Simple ELF crypter using RC4 encryption.
-
BluePill github.com
-
Noia github.com
Simple Android application sandbox file browser tool
-
imagemounter github.com
Command line utility and Python package to ease the (un)mounting of forensic disk images.
-
NightShade github.com
A simple security CTF framework.
-
Cyclops github.com
The Cyclops is a web browser with XSS detection feature, it is chromium-based xss detection that used to find the flows from a source to a sink.
-
FlutterTap github.com
Zygisk module that bypasses BoringSSL certificate verification inside libflutter.so and redirects the traffic of selected Flutter apps to a proxy. Persistent across reboots, so it needs no Frida session, no cable, and no listening port.
-
AbuseHelper github.com
-
Mzfr github.com
CTF competition write-ups by mzfr
-
itunes_backup2hashcat github.com
Extract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat.
-
WMI Monitor github.com
-
Posh-VirusTotal github.com
-
Silent-Packer github.com
Silent Packer is an ELF / PE packer written in pure C.
-
WELA github.com
Windows Event Log Analyzer aims to be the Swiss Army knife for Windows event logs.
-
OTX-Suricata github.com
Create rules and configuration for Suricata to alert on indicators from an OTX account.
-
Acquire github.com
Acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container. This makes Acquire an excellent tool to, among others, speedup the process of digital forensic triage. It uses Dissect to gather that information from the raw…
-
unpacker github.com
-
Anvilogic Detection Armory github.com
Anvilogic's opensource and publicly available detection content.
-
SimpleDPack github.com
A very simple windows EXE packing tool for learning or investigating PE structure.
-
Vezir Project github.com
Virtual Machine for Mobile Application Pentesting and Mobile Malware Analysis
-
PyChallFactory github.com
Small framework to create/manage/package jeopardy CTF challenges.
-
DroidGround github.com
A flexible playground for Android CTF challenges
-
nsrllookup github.com
-
rulesfinder github.com
This tool finds efficient password mangling rules (for John the Ripper or Hashcat) for a given dictionary and a list of passwords.
-
Madrolyzer github.com
extracts actionable data like C&C, phone number etc.
-
NTFuzz github.com
(2021) - A type-aware Windows kernel fuzzer that statically analyzes system binaries to infer system call types for more effective fuzzing.
-
ctf_import github.com
run basic functions from stripped binaries cross platform.
-
Cognito Scanner github.com
CLI tool to pentest Cognito AWS instance. It implements three attacks: unwanted account creation, account oracle and identity pool escalation
-
IMF github.com
(2017) - A kernel API fuzzer that leverages automated API model inference to discover vulnerabilities in macOS kernel APIs.
-
CANNiBUS github.com
A Go server that allows a room full of researchers to simultaneously work on the same vehicle, whether for instructional purposes or team reversing sessions.
-
token-reverser github.com
Words list generator to crack security tokens.
-
Fino github.com
-
ITS Geonetworking github.com
ETSI ITS G5 GeoNetworking stack, in Java: CAM-DENM / ASN.1 PER / BTP / GeoNetworking
-
MalPipe github.com
-
pwngitmanager github.com
-
PANDA github.com
-
Witcher github.com
A web application fuzzer that utilizes mutational fuzzing to explore web applications and fault escalation to detect command and SQL injection vulnerabilities.
-
odex-patcher github.com
Run arbitrary code by patching OAT files
-
0e85dc6eaf github.com
Write-ups for CTF challenges by 0e85dc6eaf
-
sherlocked github.com
-
Mira github.com
Runtime protection analysis platform for third-party Android and iOS apps, enabling AI to use host-app-side shell, Java, Native, and Frida capabilities for environment risk detection and hardening validation.
-
Reverse Engineering Resources github.com
-
CakeFuzzer github.com
The ultimate web application security testing tool for CakePHP-based web applications. CakeFuzzer employs a predefined set of attacks that are randomly modified before execution. Leveraging its deep understanding of the Cake PHP framework, Cake Fuzzer launches attacks on all…
- next page of items loading…
