MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.
Repository Index
47,133 repositories indexed
217–240 of 400 · Most stars
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- beacons
- blue-team
- c2
- command-and-control
CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
Tool to gather Threat Intelligence indicators from publicly available sources
WinDBG Anti-RootKit Extension
- kernel-mode
- c-plus-plus
- malware
- malware-analysis
Codesign Electron macOS apps
- electron-osx-sign
- macos
- entitlements
- provisioning-profiles
:no_entry: (DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
- security-tools
- security
- attestation
- verification
🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️
Linker/Compiler/Tool detector for Windows, Linux and MacOS.
- detect
- reverse-engineering
- signature
- malware-analysis
DFIRTrack - The Incident Response Tracking Application
- incident-response
- digital-forensics
- dfir
- incident-response-tooling
A colleciton of CTF write-ups all using pwntools
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
- blue-team
- detection-engineering
- edr
- endpoint-detection
Using Intel's PIN tool to solve CTF problems
- ctf
- pin
- reverse-engineering
- instruction-counting
A front-end JavaScript toolkit for creating DNS rebinding attacks.
A tool for deploying and detecting use of Active Directory honeytokens
dll injection tool that implements various methods
AVClass malware labeling tool
Remote forensics meta tool
Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF
- owasp
- ctf
- ctfd
- application-security
A Linux packet crafting tool.
- packet-crafting
- networking
- hacking-tool
- intrusion-prevention
Open PS5 firmware 14.10 research: Lua userland experiments, syscall and attack-surface analysis. Kernel read/write and a complete exploit are not demonstrated.
- ps5
- ps5-homebrew
- ps5-jailbreak
- ps5-tools
Forensics artefact collection tool for systems running Microsoft Windows
- dfir
- incident-response
- collection