Repository Index

WinDBG Anti-RootKit Extension

• kernel-mode
• c-plus-plus
• malware
• malware-analysis

Elixir encryption library designed for Ecto

• elixir
• encryption
• ecto
• hex

Automated Attack Simulation in the Cloud, complete with detection use cases.

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

• security-tools
• security
• attestation
• verification

Go-Guardian is a golang library that provides a simple, clean, and idiomatic way to create powerful modern API and web authentication.

• golang
• totp
• hotp
• 2fa

CuckooDroid - Automated Android Malware Analysis with Cuckoo Sandbox.

JD-Core is a JAVA decompiler written in JAVA.

Linker/Compiler/Tool detector for Windows, Linux and MacOS.

• detect
• reverse-engineering
• signature
• malware-analysis

Nginx common useful configuration

• nginx
• configs
• nginx-configuration
• codesandbox

Defanged Indicator of Compromise (IOC) Extractor.

• ioc
• indicators-of-compromise
• library
• ioc-extractor

🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more

• tls
• ssl
• certificate
• keystore

OmniAuth strategy for Twitter

Password cracking rules and masks for hashcat that I generated from cracked passwords.

:atom: Social (OAuth1\OAuth2\OpenID\OpenIDConnect) sign with PHP :shipit:

• php
• oauth
• social
• oauth-application

The Ultimate Boilerplate for Products.

• boilerplate
• meteor
• meteorjs
• nodejs

honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway

• honeytoken
• honeypot
• security
• deception

Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux

Django web application to store and manage vouchers, coupons, loyalty and gift cards digitally. Supports PWA, offline caching, expiry notifications, transaction histories, file uploads and OIDC SSO.

• coupons
• vouchers
• conventional-commits
• apprise

:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

• cybersecurity
• incident-response
• sysinternals
• nirsoft

Custom apps for the BMW MGU / iDrive 7 head unit (shift lights, virtual dyno, brake and drag timers, G-meter, fault scanner) plus an SDK kit to build and install your own.

• automotive
• bmw
• car-hacking
• head-unit

OWASP Honeypot, Automated Deception Framework.

• owasp
• honeypot
• honeynet
• deception

Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF

• owasp
• ctf
• ctfd
• application-security

Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js

• malware-samples
• wscript
• deobfuscation
• angler