Inception is a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard, PC Card and any other PCI/PCIe interfaces.
Repository Index
81,588 visible repositories in the index
73–96 of 121 · Most stars
QRLJacking or Quick Response Code Login Jacking is a simple-but-nasty attack vector affecting all the applications that relays on “Login with QR code” feature as a secure way to login into accounts which aims for hijacking users session by attackers.
PyTorch extensions for fast R&D prototyping and Kaggle farming
Must-read Papers on Textual Adversarial Attack and Defense
- paper-list
- nlp
- adversarial-learning
- adversarial-attacks
APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
- threat-hunting
- purpleteam
- python3
- windows-eventlog
ThePhish: an automated phishing email analysis tool
Bloodhound Reporting for Blue and Purple Teams
- active
- directory
- blueteam
- purpleteam
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
- csrf
- crawler
- csrf-attacks
- token-generation
An information security preparedness tool to do adversarial simulation.
- uber
- vagrant
- yaml
- celery
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
- sip
- voip
- password-cracker
- svwar
ARES - authorized red-team engagement automation with dashboard, campaign scope, module orchestration, OPSEC controls, encrypted vault, and reporting.
- active-directory
- cloud-security
- defensive-validation
- fastapi
Color palettes for Python
AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.
- ai
- attack-surface-management
- bbot
- cybersecurity
Automated Attack Simulation in the Cloud, complete with detection use cases.
Generative biopolymer design with rich conditioning.
An easy-to-use and lightweight API wrapper for Censys APIs.
- censys
- python3
- search
- pypi
DDoS attacks over Tor
- ddos
- ddos-tool
- ddos-attack
- ddos-script
Remove aircraft Doppler signatures from audio/video so recordings can't be geolocated from flyovers. Includes a reference attack scorer to measure it.
- ads-b
- audio
- doppler
- geolocation
Model extraction attacks on Machine-Learning-as-a-Service platforms.
ROPMEMU is a framework to analyze, dissect and decompile complex code-reuse attacks.
Attacking MQTT systems with Mosquittos (scalability and load testing utilities for MQTT environments)
Create adversarial attacks against machine learning Windows malware detectors
- adversarial-machine-learning
- infosec
- python
- attack
:hammer: A multiple reverse shell session/client manager via terminal
- socket
- python
- ctf
- attack-defense
HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy + Exploit Timing Attacks
- http2
- race-condition
- race-conditions
- scapy