Security
5,347 items in 29 lists
-
brood-box github.com
Hardware-isolated microVM sandbox for running coding agents (Claude Code, Codex, OpenCode) with workspace snapshot isolation, DNS-aware egress control, and MCP authorization profiles to contain damage from prompt injection attacks.
-
Application Security Education github.com
Duo Security - Training materials created by the Duo application security team, including introductory and advanced training presentations and hands-on labs.
-
FSquaDRA github.com
a tool for detecting repackaged Android applications based on app resource hash comparison.
-
Hoedur github.com
(2023) - An embedded firmware fuzzer that uses multiple input streams to represent interactions with different hardware interfaces.
-
Mem github.com
Memory analysis of Android (root required)
-
HackTheArch github.com
CTF scoring platform.
-
oplzkwp github.com
Library for ELF obfuscation ; it uses PRESENT and blake244 to encrypt your payload on the fly.
-
PeriScope github.com
(2019) - A probing and fuzzing framework that tests device drivers at the hardware-OS boundary through MMIO and DMA inputs.
-
ThreatTracker github.com
-
Detection Engineering with Splunk github.com
A GitHub repo dedicated to sharing detection analytics in SPL.
-
Radamsa Fuzzer github.com
-
CAN Simulator github.com
A Go based CAN simulator for the Raspberry Pi to be used with PiCAN2 or the open source CAN Simulator board
-
hXOR-Packer github.com
PE packer with Huffman compression and XOR encryption.
-
Vuldroid github.com
-
PIC Standard github.com
Protocol to block unauthorized or unproven agent actions via intent + provenance checks. Mitigates prompt injection & side-effect risks. Open-source (Apache 2.0).
-
common-substr github.com
Simple tool to extract the most common substrings from an input text. Built for password cracking.
-
Packing-Box github.com
Docker image gathering many packing-related tools and for making datasets of packed executables for use with machine learning.
-
Defensomania github.com
An incident response card game for security monitoring and incident response teams to discuss priorities, possible response actions and attack scenarios.
-
SQLRight github.com
(2022) - A DBMS fuzzer that combines coverage feedback, validity-oriented query mutations, and result-checking oracles to detect logical bugs.
-
HyperPill github.com
(2024) - A hypervisor fuzzer that uses the hardware virtualization interface to exercise hypervisor behavior without hypervisor-specific input grammars.
-
SMRT github.com
-
ZettelForge github.com
Agentic memory system that treats Sigma and YARA rules as first-class memory entities, with an LLM rule explainer, STIX 2.1 knowledge graph of CTI entities, and offline-first RAG to connect rules to the actors and techniques they detect. Python, MIT.
-
suricata-4-analysts github.com
The Security Analyst's Guide to Suricata.
-
RestTestGen github.com
A robust tool and framework designed for automated black-box testing of RESTful web APIs.
-
APKdevastate github.com
Advanced analysis software for APK payloads created by RATs.
-
CFGScanDroid github.com
Scans and compares the CFG against the CFG of malicious applications
-
EyeWitness github.com
-
Nozzlr github.com
Nozzlr is a bruteforce framework, trully modular and script-friendly.
-
Rephraser github.com
A Python-based reimagining of Phraser using Markov-chains for linguistically-correct password cracking.
-
FUU github.com
Fast Universal Unpacker.
-
Dexmod github.com
a tool to exemplify patching Dalvik bytecode in a DEX (Dalvik Executable) file and assist in the static analysis of Android applications.
-
An Android port of the Melkor ELF fuzzer github.com
-
Confusion checker github.com
-
DemoHunter github.com
-
Amun github.com
Amun Python-based low-interaction Honeypot.
-
PeLib github.com
PE file manipulation library.
-
Fluffy github.com
A multi-transaction differential fuzzer for finding consensus bugs in Ethereum.
-
NetCrypt github.com
A proof-of-concept packer for .NET executables, designed to provide a starting point to explain the basic principles of runtime packing.
-
OWASP ZAP Node API github.com
Leverage the OWASP Zed Attack Proxy (ZAP) within your NodeJS applications with this official API.
-
ELF-Packer github.com
Simple Polymorphic x86_64 Runtime Code Segment Cryptor.
-
FEVER github.com
Fast, extensible, versatile event router for Suricata's EVE-JSON format.
-
Python ICAP Yara github.com
-
MaleX github.com
Curated dataset of malware and benign Windows executable samples for malware researchers containing 1,044,394 Windows executable binaries and corresponding image representations with 864,669 labelled as malware and 179,725 as benign.
-
NullKia github.com
Comprehensive mobile security framework supporting 18 manufacturers with baseband exploitation, cellular security, TEE/TrustZone research, and BootROM extraction tools.
-
BadLibrary github.com
-
ConDroid github.com
Performs a combination of symbolic + concrete execution of the app
-
XSS.png github.com
-
sshwatch github.com
IPS for SSH similar to DenyHosts written in Python. It also can gather information about attacker during the attack in a log.
-
theArk github.com
Windows x86 PE Packer In C++.
-
snync github.com
- next page of items loading…
