Security
5,347 items in 29 lists
-
WELA github.com
Windows Event Log Analyzer aims to be the Swiss Army knife for Windows event logs.
-
OTX-Suricata github.com
Create rules and configuration for Suricata to alert on indicators from an OTX account.
-
Acquire github.com
Acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container. This makes Acquire an excellent tool to, among others, speedup the process of digital forensic triage. It uses Dissect to gather that information from the raw…
-
unpacker github.com
-
Anvilogic Detection Armory github.com
Anvilogic's opensource and publicly available detection content.
-
SimpleDPack github.com
A very simple windows EXE packing tool for learning or investigating PE structure.
-
Vezir Project github.com
Virtual Machine for Mobile Application Pentesting and Mobile Malware Analysis
-
PyChallFactory github.com
Small framework to create/manage/package jeopardy CTF challenges.
-
DroidGround github.com
A flexible playground for Android CTF challenges
-
nsrllookup github.com
-
rulesfinder github.com
This tool finds efficient password mangling rules (for John the Ripper or Hashcat) for a given dictionary and a list of passwords.
-
Madrolyzer github.com
extracts actionable data like C&C, phone number etc.
-
NTFuzz github.com
(2021) - A type-aware Windows kernel fuzzer that statically analyzes system binaries to infer system call types for more effective fuzzing.
-
ctf_import github.com
run basic functions from stripped binaries cross platform.
-
Cognito Scanner github.com
CLI tool to pentest Cognito AWS instance. It implements three attacks: unwanted account creation, account oracle and identity pool escalation
-
IMF github.com
(2017) - A kernel API fuzzer that leverages automated API model inference to discover vulnerabilities in macOS kernel APIs.
-
CANNiBUS github.com
A Go server that allows a room full of researchers to simultaneously work on the same vehicle, whether for instructional purposes or team reversing sessions.
-
token-reverser github.com
Words list generator to crack security tokens.
-
Fino github.com
-
ITS Geonetworking github.com
ETSI ITS G5 GeoNetworking stack, in Java: CAM-DENM / ASN.1 PER / BTP / GeoNetworking
-
MalPipe github.com
-
pwngitmanager github.com
-
PANDA github.com
-
Witcher github.com
A web application fuzzer that utilizes mutational fuzzing to explore web applications and fault escalation to detect command and SQL injection vulnerabilities.
-
odex-patcher github.com
Run arbitrary code by patching OAT files
-
0e85dc6eaf github.com
Write-ups for CTF challenges by 0e85dc6eaf
-
sherlocked github.com
-
Mira github.com
Runtime protection analysis platform for third-party Android and iOS apps, enabling AI to use host-app-side shell, Java, Native, and Frida capabilities for environment risk detection and hardening validation.
-
Reverse Engineering Resources github.com
-
CakeFuzzer github.com
The ultimate web application security testing tool for CakePHP-based web applications. CakeFuzzer employs a predefined set of attacks that are randomly modified before execution. Leveraging its deep understanding of the Cake PHP framework, Cake Fuzzer launches attacks on all…
-
Shovel github.com
Web interface to explore Suricata EVE outputs, with a primary focus on network analysis in CTF competitions.
-
PassGPT github.com
PassGPT is a GPT-2 model trained from scratch on password leaks.
-
Cfngoat github.com
Bridgecrew - Cloud Formation templates for creating stacks of intentionally insecure services in AWS. Ideal for testing the Cloud Formation Infrastructure as Code Analysis tools above.
-
IPinfo github.com
-
Rling github.com
RLI Next Gen (Rling), a faster multi-threaded, feature rich alternative to rli found in hashcat utilities.
-
StateFuzz github.com
(2022) - A Linux driver fuzzer that identifies state variables through static analysis and uses their values as fuzzing feedback.
-
V-SHUTTLE github.com
(2021) - An AFL-based fuzzer for virtual devices in hosted hypervisors, with semantics-aware input generation.
-
DifuzzRTL github.com
A differential fuzz testing approach for CPU verification.
-
cuckoo-modified-api github.com
Python library to control a cuckoo-modified sandbox.
-
SGFuzz github.com
(2022) - A libFuzzer-based fuzzer that adds state-transition feedback to explore stateful software, including network protocol implementations.
-
DATA github.com
-
BODMAS github.com
Code for our DLS'21 paper - BODMAS: An Open Dataset for Learning based Temporal Analysis of PE Malware.
-
PiCCANTE github.com
Open-source CAN hacking tool based on Raspberry Pi Pico [2] (W) - Up to 3x CAN interfaces, includes ELM327 emulator.
-
KextFuzz github.com
(2023) - A fuzzing prototype for macOS kernel extensions on Apple Silicon that instruments extensions and patches entitlement checks.
-
MPT github.com
MPT (Mobile Pentest Toolkit) is a must-have solution for your Android penetration testing workflows. This tool allows you to automate security tasks.
-
NotRuler github.com
-
HTTPReplay github.com
-
openid_client github.com
OpenID Connect Relying Party client library for Dart in Flutter, Web and Command Line.
-
Dependency Combobulator github.com
-
nyxgeek-rules github.com
Custom password cracking rules for Hashcat and John the Ripper.
- next page of items loading…
