Repository Index

Reverse engineer anything with agents, from app behavior down to native binaries.

Program to reverse Docker images into Dockerfiles

• security-tools
• security
• docker-security
• reverse-engineering

Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.

• digital-security
• forensics
• incident-response
• ioc

Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0

• android-unpacker
• gdb
• qemu
• reverse-engineering

Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group).

• dfir
• dissect
• python

A header only library for creating and validating json web tokens in c++

• cpp
• header-only
• jwt
• json-web-token

HellPot is a cross-platform portal to endless suffering meant to punish unruly HTTP bots.

• honeypot
• http
• web
• deception

A pure Python HTML5 parser that just works. No C extensions to compile. No system dependencies to install. No complex API to learn.

• html5
• parser
• python
• html

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

• cybersecurity
• threat
• ioc
• malware

A Game of Hackers (CTF Scoreboard & Game Manager)

• security
• scoring-engine
• ctf

Encrypt/Decrypt: AES. Hash: MD5, SHA(SHA1, SHA224, SHA256, SHA384, SHA512). Encode/Decode: Base64, Hex.

Protect against malicious open source packages 🤖

• devsecops
• security
• supply-chain-security
• policy-as-code

Generate smart and powerful wordlists

• wordlist
• password
• hacking-tool
• password-cracking

SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.

• sip
• voip
• password-cracker
• svwar

Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.

A simple, semantic and developer-friendly crypto package for golang

• aes
• rsa
• des
• 3des

Wordlist, rules and masks from Kaonashi project (RootedCON 2019)

• wordlist
• password
• password-strength
• password-safety

Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.

• cve-scanning
• pentesting-tools
• rust
• vulnerability-scanners

A captcha library that generates audio and image CAPTCHAs.

• captcha

macOS (& ios) Artifact Parsing Tool

• dfir
• forensics
• macos

Mundane is a Rust cryptography library backed by BoringSSL that is difficult to misuse, ergonomic, and performant (in that order).

• cryptography
• rust
• boringssl

A server side OAuth2 Bundle for Symfony

• php
• symfony
• symfony-bundle
• oauth2

TranslatedDeepSeek Harness integrated armor-breaking security analysis plugin: aggregating all domains of Android · Web · Native · Protocol · Malware · AI-Security (9 bundles + 1 preset)

• dsh-plugin
• cordis
• deepseek-harness
• dsh

in-toto is a framework to protect supply chain integrity.

• supply-chain
• security
• new-york-university
• secure-systems-lab