Repository Index

Volatility 3.0 development

• digital-investigation
• forensics
• incident-response
• malware

This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.

• reverse-engineering
• rop
• rop-exploitation
• rop-gadgets

Free, open-source check for traces of mercenary spyware (Pegasus, Predator, Graphite, Candiru and more) on computers, Android phones and iPhone backups. Double-click apps for Windows, Mac and Linux, in 27 languages.

A python script that finds endpoints in JavaScript files

• infosec
• endpoints

Digging Deeper....

• incident-response
• forensics-investigations
• inventory-management
• endpoint-security

P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.

Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.

• reverse-engineering
• symbolic-execution
• binary-analysis
• program-analysis

A simple ruby authentication solution.

A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes

• otp
• 2fa
• 2factor
• totp

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

• malware
• deobfuscation
• strings
• flare

Decrypted content of eqgrp-auction-file.tar.xz

• exploits
• shadowbrokers
• equationgroup
• hacking

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

• vulnerabilities
• scanner
• firefox-extension
• grunt-plugins

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.

• bro
• scans
• nmap
• network

Your web application for managing personal data.

• dashboard
• dashboards
• manager
• symfony

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

• security
• linux-namespaces
• linux
• process-isolation

OAuth Proxy

• nodejs
• javascript
• oauth
• oauth2

🛠 Secure, stateless, and cookie-based session library for Next.js or any JavaScript framework

• nextjs
• authentication
• session
• stateless

UNIX-like reverse engineering framework and command-line toolset.

• reverse-engineering
• program-analysis
• security
• exploitation

A Social Media Enumeration & Correlation Tool by Jacob Wilkin(Greenwolf)

A high performance offensive security tool for reconnaissance and vulnerability scanning

• reconnaissance
• scanner
• vulnerability-assessment
• vulnerability-scanner

:busts_in_silhouette: A bash-tool to store your private data inside a git repository.

• git-secret
• git
• git-addons
• gpg

The repository host gives no description.

Private front-end for Reddit

• privacy
• privacy-friendly-alternatives
• privacy-frontend
• rust