Security
5,347 items in 29 lists
-
libformatstr github.com
Simplify format string exploitation.
-
Cold Disk Quick Response github.com
Streamlined list of parsers to quickly analyze a forensic image file (dd, E01, .vmdk, etc) and output nine reports.
-
known_hosts-hashcat github.com
A guide and tool for cracking ssh known_hosts files with hashcat.
-
aws_ir github.com
-
UDSim github.com
GUI tool that can monitor a CAN bus and automatically learn the devices attached to it by watching communications.
-
arduino-canbus-monitor github.com
No matter which shield is selected you will need your own sniffer. This is implementation of standard Lawicel/SLCAN protocol for Arduino + any MCP CAN Shield to use with many standard CAN bus analysis software packages or SocketCAN
-
LLMVault github.com
Self-hosted CTF-style training range for the OWASP LLM Top 10, with 25 labs across three tiers. Play Mode uses scripted assistants so flags reproduce every time; Live Mode points the same attacks at a real model on your own machine with the secret regenerated per session, so…
-
docker-suricata github.com
Suricata Docker image.
-
Media Fuzzing Framework for Android github.com
-
Kraken github.com
A multi-platform distributed brute-force password cracking system.
-
DVCS-Pillage github.com
-
MFT Browser github.com
MFT directory tree reconstruction & record info.
-
French Wordlists github.com
This project aim to provide french word list about everything a person could use as a base password.
-
Linux Security and Monitoring Scripts github.com
Security and monitoring scripts you can use to monitor your Linux installation for security-related events or for an investigation. Among other finding systemd unit files used for malware persistence.
-
dynStruct github.com
structures recovery via dynamic instrumentation.
-
ACSTIS github.com
ACSTIS helps you to scan certain web applications for AngularJS Client-Side Template Injection (sometimes referred to as CSTI, sandbox escape or sandbox bypass). It supports scanning a single request but also crawling the entire web application for the AngularJS CSTI…
-
WebHashCat github.com
WebHashcat is a very simple but efficient web interface for hashcat password cracking tool.
-
-
SmaliSCA github.com
Smali Static Code Analysis
-
Respounder github.com
-
dumpflash github.com
Low-level NAND Flash dump and parsing utility.
-
One Step Decompiler github.com
Android APK Decompilation for the Lazy
-
-
Zeek zeek.org
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
-
virustotal virustotal.com
VirusTotal, a subsidiary of Google, is a free online service that analyzes files and URLs enabling the identification of viruses, worms, trojans and other kinds of malicious content detected by antivirus engines and website scanners. At the same time, it may be used as a means…
-
Prometheus prometheus.io
a time series database and service monitoring system.
-
SonarQube Server sonarqube.org
SonarQube empowers development teams with a code quality and security solution that deeply integrates into your enterprise environment; enabling you to deploy clean code consistently and reliably. SonarQube provides a free and open source Community Build.
-
LGTM lgtm.com
copyright: — Find security vulnerabilities, variants, and critical code quality issues using CodeQL queries over source code. Automatic PR code review; free for open source. Formerly semmle. It supports public Git repositories hosted on Bitbucket Cloud, GitHub.com, GitLab.com.
-
Hopper hopperapp.com
copyright: — macOS and Linux reverse engineering tool that lets you disassemble, decompile and debug applications. Hopper displays the code using different representations, e.g. the Control Flow Graph, and the pseudo-code of a procedure. Supports Apple Silicon.
-
Ghidra ghidra-sre.org
A software reverse engineering (SRE) suite of tools developed by NSA's Research Directorate in support of the Cybersecurity mission
-
Tor Browser torproject.org
Privacy browser routing traffic over the Tor network.
-
Nmap nmap.org
A free, open-source network scanner used for discovering hosts, services, and vulnerabilities on computer networks through advanced port scanning and OS detection techniques.
-
mitmproxy mitmproxy.org
Interactive intercepting HTTP proxy for penetration testers and software developers.
-
Charles charlesproxy.com
HTTP proxy/monitor to view HTTP and HTTPS traffic.
-
tcpdump tcpdump.org
Packet analyzer for network traffic capture.
-
Arduino arduino.cc
Arduino boards have a number of shields you can attach to connect to CAN-enabled devices.
-
ADOKit github.com
Azure DevOps Services Attack Toolkit.
-
CANToolz github.com
CANToolz is a framework for analysing CAN networks and devices. It is based on several modules which can be assembled in a pipeline.
-
PicoCTF github.com
The platform used to run picoCTF. A great framework to host any CTF.
-
Android Malware Sandbox github.com
-
hat github.com
An Automated Hashcat Tool for common wordlists and rules to speed up the process of cracking hashes during engagements.
-
PowerShell Autoruns github.com
A PowerShell version of Autoruns.
-
artifactcollector github.com
The artifactcollector project provides a software that collects forensic artifacts on systems.
-
antinet github.com
.NET anti-managed debugger and anti-profiler code
-
CanoPy github.com
A python gui used to visualize and plot message payloads in real time.
-
ironbee github.com
IronBee is an open source project to build a universal web application security sensor. IronBee as a framework for developing a system for securing web applications - a framework for building a web application firewall (WAF).
-
Detection and Response Pipeline github.com
A list of tools for each component of a detection and response pipeline which includes real-world examples.
-
Aaia github.com
-
File Scanning Framework github.com
-
PSHunt github.com
- next page of items loading…
