Security
5,347 items in 29 lists
-
johnny github.com
GUI frontend to John the Ripper.
-
WDBGARK github.com
-
Gym-Malware github.com
This is a malware manipulation environment for OpenAI's gym.
-
Practical introduction to SSL/TLS github.com
-
A2SV github.com
-
Diffy github.com
DFIR tool developed by Netflix's SIRT that allows an investigator to quickly scope a compromise across cloud instances (Linux instances on AWS, currently) during an incident and efficiently triaging those instances for followup actions by showing differences against a baseline.
-
ELFkickers github.com
A collection of programs that access and manipulate ELF files.
-
Doorman github.com
osquery fleet manager that allows remote management of osquery configurations retrieved by nodes. It takes advantage of osquery's TLS configuration, logger, and distributed read/write endpoints, to give administrators visibility across a fleet of devices with minimal overhead…
-
Visualize_Logs github.com
Open source visualization library and command line tools for logs (Cuckoo, Procmon, more to come).
-
wxHexEditor github.com
-
Leonidas github.com
Automated Attack Simulation in the Cloud, complete with detection use cases.
-
IdentityModel.OidcClient github.com
C# / .NET OpenID Connect relying party client certified library for native mobile/desktop applications.
-
kwprocessor github.com
Advanced keyboard-walk generator with configureable basechars, keymap and routes.
-
CuckooDroid github.com
Android extension for Cuckoo sandbox
-
sandboxapi github.com
-
nightHawk github.com
Application built for asynchronous forensic data presentation using ElasticSearch as the backend. It's designed to ingest Redline collections.
-
StegCracker github.com
Steganography brute-force utility to uncover hidden data inside files.
-
Glastopf github.com
-
AndBug github.com
-
kAFL github.com
(2017) - A hardware-assisted x86-64 VM kernel fuzzing framework with performant VM reloads for finding OS kernel vulnerabilities.
-
Google Play crawler (Java) github.com
-
Gato-X github.com
GitHub Attack Toolkit - Extreme Edition.
-
KEVM github.com
A formal model of the EVM in the K framework.
-
FlawFinder github.com
David Wheeler - Scan C / C++ code for potential security weaknesses.
-
iocextract github.com
-
OpenSOC github.com
OpenSOC integrates a variety of open source big data technologies in order to offer a centralized tool for security monitoring and analysis.
-
bXSS github.com
-
Jenkins Attack Framework github.com
This tool can manage Jenkins tasks, like listing jobs, dumping credentials, running commands/scripts, and managing API tokens.
-
WINNIE github.com
(2021) - A Windows application fuzzer that combines harness synthesis with fast process cloning to test code beyond graphical interfaces.
-
nsa-rules github.com
Password cracking rules and masks for hashcat generated from cracked passwords.
-
MalSploitBase github.com
-
FireEye's Sunburst Countermeasures github.com
-
mozilla-django-oidc github.com
A Django OpenID Connect relying party library maintained by Mozilla.
-
AFLGo github.com
(2017) - An AFL-based directed greybox fuzzer that generates inputs to reach specified target locations in a program.
-
Phantom Community Playbooks github.com
Phantom Community Playbooks for Splunk but also customizable for other use.
-
dstack github.com
-
Insider CLI github.com
A open source Static Application Security Testing tool (SAST) written in GoLang for Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C# and Javascript (Node.js).
-
friTap github.com
Intercept SSL/TLS connections with Frida; Allows TLS key extraction and decryption of TLS payload as PCAP on Android in real-time.
-
HASSH github.com
-
USB Keystroke Injection Protection github.com
-
DFIRTrack github.com
Incident Response tracking application handling one or more incidents via cases and tasks with a lot of affected systems and artifacts.
-
Machinae github.com
-
Catalyst github.com
A free SOAR system that helps to automate alert handling and incident response processes.
-
Androwarn github.com
detects and warns the user about potential malicious behaviors developed by an Android application.
-
Damn Vulnerable LLM Agent github.com
A sample chatbot powered by a ReAct agent, implemented with Langchain. It's designed to be an educational tool for security researchers, developers, and enthusiasts to understand and experiment with prompt injection attacks in ReAct agents.
-
JShell github.com
-
pwntools writeups github.com
A collection of CTF write-ups all using pwntools.
-
Fileintel github.com
Pull intelligence per file hash.
-
Dalton github.com
Suricata and Snort IDS rule and pcap testing system.
-
Chronicle (GCP) Detection Rules github.com
Chronicle's detection rules written natively for the Chronicle Platform.
- next page of items loading…
