WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.
- waf
- fingerprint
- waffit
- web-application-firewall
Repository Index
88,073 visible repositories in the index
1–24 of 59 · Most stars
Cairn is a general-purpose AI state-space search engine, validated first on autonomous penetration testing. Sometimes misspelled as Carin.
Tool for partial deblobbing of Intel ME/TXE firmware images
IntelOwl: manage your Threat Intelligence at scale
- security-tools
- python
- threat-intelligence
- ioc
The first AI agent that builds permissionless integrations through reverse engineering platforms' internal APIs.
A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
- threat-hunting
- sysmon
- hunting-campaigns
- hypothesis
Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.
- malware
- virustotal
- malpedia
- urlhaus
Firmware patcher for Xiaomi routers
- xiaomi
- router
- exploit
- installer
Loki - Simple IOC and YARA Scanner
- python
- yara
- signature
- scanner
Collaborative forensic timeline analysis
Platform Security Assessment Framework
Investigate malicious Windows logon by visualizing and analyzing Windows event log
- security
- dfir
- javascript
- visualization
Detect and bypass web application firewalls and protection systems
- bypass
- firewall
- web-application
- detection
Inofficial Qualcomm Firehose / Sahara / Streaming / Diag Tools :)
- firehose
- sahara
- streaming
- diag
Firefox Decrypt is a tool to extract passwords from Mozilla (Firefox™, Waterfox™, Thunderbird®, SeaMonkey®) profiles
- python
- libnss3
- extract-passwords
- firefox-decrypt
The first fruit of the Nüwa tree — an autonomous AI pentest legion (634-team champion, 8h unattended, 1B tokens beat 4.5B). Not just a tool: evolvable by design. Grow your own fruit on the Nüwa Foundation (Create/Language/History).
OFRAK: unpack, modify, and repack binaries.
Your Everyday Threat Intelligence
- infosec
- threatintel
- threat-sharing
- threat-hunting
A tool that disconnects Tuya IoT devices from the cloud, allowing them to run completely locally.
- bk7231n
- bk7231t
- tuya-convert
- iot
A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms)
- reverse-engineering
- linux-kernel
- linux
- vmlinux
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox
- google-chrome
- hindsight
- chrome
- forensics
A blazing fast, async-first, undetectable webscraping/web automation framework based on ultrafunkamsterdam/nodriver. Now with Docker support!
- chrome
- chrome-devtools-protocol
- python
- webscraping
Firmware Analysis and Comparison Tool
- firmware-tools
- firmware-analysis
- security-automation
- security