Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
📱 objection - runtime mobile exploration
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.
An agent skill that finds where a photo was taken — OpenStreetMap geometry, elevation skylines, satellite imagery and street view — and shows its work. Works with Claude Code, Codex, Cursor, Gemini CLI, OpenCode and GitHub Copilot.
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
- phishing
- typosquatting
- domains
- dns
JSON Web Token implementation in Python
The ultimate Python library in building OAuth, OpenID Connect clients and servers. JWS, JWE, JWK, JWA, JWT included.
Loki - Simple IOC and YARA Scanner
- python
- yara
- signature
- scanner
Collaborative forensic timeline analysis
A generic, spec-compliant, thorough implementation of the OAuth request-signing logic
Social auth made simple
Phishing Campaign Toolkit
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
Super timeline all the things
Fake Protocol Server
A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
Django Simple Captcha is an extremely simple, yet highly customizable Django application to add captcha images to any Django form.
Noriben - Portable, Simple, Malware Analysis Sandbox
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
- csrf
- crawler
- csrf-attacks
- token-generation