Programming
Software development: programming languages, coding, libraries and frameworks, software engineering and architecture, source control, developer tools, databases, and infrastructure.
-
-
PayloadsAllTheThings - SQL Injection github.com
-
-
MySQL Error Based SQL Injection Using EXP exploit-db.com
-
Remote Exploitation of Honda Cars youtube.com
The Honda Connect app used by Honda City 5th generation used weak security mechanisms in its APIs for access control which would allow a malicious user to perform actions like starting the car, locking/unlocking car etc. remotely by interacting with it's Telematics Control Unit…
-
PALADIN sumuri.com
Modified Linux distribution to perform various forensics task in a forensically sound manner. It comes with many open source forensics tools included.
-
Open Computer Forensics Architecture sourceforge.net
Another popular distributed open-source computer forensics framework. This framework was built on Linux platform and uses postgreSQL database for storing data.
-
NST - Network Security Toolkit sourceforge.net
Linux distribution that includes a vast collection of best-of-breed open source network security applications useful to the network security professional.
-
O2OO web.archive.org
Works with the ELM327 to record data to a SQLite database for graphing purposes. It also supports reading GPS data. You can connect this to your car and have it map out using Google Maps KML data where you drive.
-
Uptane uptane.github.io
Uptane is an open and secure software update system design protecting software delivered over-the-air to the computerized units of automobiles and is designed to be resilient even to the best efforts of nation state attackers.
-
Car Hacking with Craig Smith softwareengineeringdaily.com
Software Engineering Daily did an amazing episode with Craig Smith, author of the Car Hacking Handbook (above), on hacking into vehicles.
-
RomRaider romraider.com
An open source tuning suite for the Subaru engine control unit that lets you view and log data and tune the ECU.
-
Log Parser Lizard lizard-labs.com
Execute SQL queries against structured log data: server logs, Windows Events, file system, Active Directory, log4net logs, comma/tab separated text, XML or JSON files. Also provides a GUI to Microsoft LogParser 2.2 with powerful UI elements: syntax editor, data grid, chart…
-
BUSMASTER rbei-etas.github.io
An Open Source tool to simulate, analyze and test data bus systems such as CAN, LIN, FlexRay.
-
Python Security pythoncarsecurity.com
A website for browsing and buying python-integrated cars having certain vehicular security features.
-
SocketCAN python-can.readthedocs.io
Python interface to SocketCAN
-
IPASIS ipasis.com
Real-time IP reputation and email validation API for investigating suspicious interactions. Returns an Interaction Trust Score (0-100) combining VPN/proxy/Tor detection with email risk assessment in a single API call.
-
OpenXC openxcplatform.com
OpenXC is a combination of open source hardware and software that lets you extend your vehicle with custom applications and pluggable modules. It uses standard, well-known tools to open up a wealth of data from the vehicle to developers. Started by researchers at Ford, it works…
-
OpenXC openxcplatform.com
Currently, OpenXC works with Python and Android, with libraries provided to get started.
-
CANBadger gutenshit.github.io
A tool for reverse-engineering and testing automotive systems. The CANBadger consists of both hardware and software. The main interface is a LPC1768/LPC1769 processor mounted on a custom PCB, which offers two CAN interfaces, SD Card, a blinky LED, some GPIO pins, power supply…
-
NIST Automotive Cybersecurity Community of Interest csrc.nist.gov
NIST, the organization behind the NVD CVE database and modern cryptographic standards, runs a Community of Interest group for Automotive Cybersecurity that seeks to "provide a way for NIST to facilitate the discussions and receive comments and feedback from the automotive…
-
Cohda Wireless cohdawireless.com
V2X DSRC Radio and Software
-
Carloop carloop.io
Open source development kit that makes it easy to connect your car to the Internet. Lowest cost car hacking tool that is compatible with SocketCAN and can-utils. No OBD-II to serial cable required.
-
CANtact cantact.io
"The Open Source Car Tool" designed to help you hack your car. You can buy one or make your own following the guide here.
-
canopen canopen.readthedocs.io
Python module to communicate with CANopen devices
-
Car Hacking in 30 Minutes or Less brysonpayne.com
Using VirtualBox and Kali Linux, you can start car hacking using completely free open-source software and tools, including can-utils, ICSim, ScanTool, Wireshark, and tcpdump
-
The Appliance for Digital Investigation and Analysis (ADIA) forensics.cert.org
VMware-based appliance used for digital investigation and acquisition and is built entirely from public domain software. Among the tools contained in ADIA are Autopsy, the Sleuth Kit, the Digital Forensics Framework, log2timeline, Xplico, and Wireshark. Most of the system…
-
Memoryze fireeye.com
Free memory forensic software that helps incident responders find evil in live memory. Memoryze can acquire and/or analyze memory images, and on live systems, can include the paging file in its analysis.
-
-
ARTist artist.cispa.saarland
a flexible open-source instrumentation and hybrid analysis framework for Android apps and Android's Java middleware. It is based on the Android Runtime's (ART) compiler and modifies code during on-device compilation.
-
AppSweep by Guardsquare appsweep.guardsquare.com
Free, fast Android application security testing for developers
-
GitHub Enterprise Remote Code Execution bounty.github.com
-
RTIR bestpractical.com
Request Tracker for Incident Response (RTIR) is the premier open source incident handling system targeted for computer security teams. We worked with over a dozen CERT and CSIRT teams around the world to help you handle the ever-increasing volume of incident reports. RTIR…
-
GitHub Enterprise SQL Injection blog.orange.tw
-
Advisory: Java/Python FTP Injections Allow for Firewall Bypass blog.blindspotsecurity.com
-
-
AWS takeover through SSRF in JavaScript 10degres.net
-
Altus iX Developer XAML Deserialization RCE 0day-rubbish.com
-
Malicious Software zeltser.com
-
python-registry williballenthin.com
-
Others owasp.org
-
JS Nice jsnice.org
a web service guessing JS variables names and types based on the model derived from open source.
-
Docker Metasploit hub.docker.com
-
EnCase guidancesoftware.com
The shared technology within a suite of digital investigations products by Guidance Software
-
Findsubdomains findsubdomains.com
A subdomains discovery tool that collects all possible subdomains from open source internet and validates them through various tools to provide accurate results.
-
CodeEngn codeengn.com
(Korean)
-
Android Device Security Database android-device-security.org
Database of security features of Android devices
-
Detox relentless-coding.org
A Javascript malware analysis tool.
-
Metasploit metasploit.com
Penetration testing software.
-
Revelo kahusecurity.com
Analyze obfuscated Javascript code.
- next page of items loading…
