Repository Index

AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.

• ai
• attack-surface-management
• bbot
• cybersecurity

Scirius is a web application for Suricata ruleset management and threat hunting.

• python
• security
• management
• interface

MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.

Tool to gather Threat Intelligence indicators from publicly available sources

Charm: A Framework for Rapidly Prototyping Cryptosystems

• python
• cryptography
• prototyping

:no_entry: (DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.

• security
• dfir
• forensics

Modular file scanning/analysis framework

• python
• analytic-machines
• analysis-framework
• python-script

Automated Attack Simulation in the Cloud, complete with detection use cases.

CuckooDroid - Automated Android Malware Analysis with Cuckoo Sandbox.

Web Application Honeypot

Defanged Indicator of Compromise (IOC) Extractor.

• ioc
• indicators-of-compromise
• library
• ioc-extractor

Malware exploits

Paaster is a secure and user-friendly pastebin application that prioritizes privacy and simplicity. With end-to-end encryption and paste history, Paaster ensures that your pasted code remains confidential and accessible.

• pastebin
• paaster
• e2ee
• paste

A django OpenID Connect library

USB Keystroke Injection Protection

The repository host gives no description.

Samsung Tizen root

• embedded-linux
• firmware-analysis
• hardware-hacking
• mali-gpu

DFIRTrack - The Incident Response Tracking Application

• incident-response
• digital-forensics
• dfir
• incident-response-tooling

Machinae Security Intelligence Collector

JShell - Get a JavaScript shell with XSS.

honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway

• honeytoken
• honeypot
• security
• deception

A colleciton of CTF write-ups all using pwntools

Collection of example YARA-L rules for use within Google Security Operations

The repository host gives no description.