The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
🚀AutoRuns is a PowerShell module that will help do live incident response and enumerate autoruns artifacts that may be used by legitimate programs as well as malware to achieve persistence.
Slider captcha support mobile
Enable root SSH on BMW MGU head units (iDrive 7 / ID8 BDC3 / ID8 BCP) over ENET - flash the debug image, enroll, persistent SSH with no B7F8E5 DTC, and a unique per-car key.
- developer-mode
- idrive
- idrive7
- root
A collection of useful utility functions
- utility
- utilities
- string
- strings
inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques
Small portable Elliptic-Curve Diffie-Hellman in C
- elliptic-curve-diffie-hellman
- ecdh
- public-key-cryptography
- c
Very fast, high-quality hash function, discrete-incremental and streamed hashing-capable (non-cryptographic, header-only C/C++) 27GB/s + PRNG
Cryptographic library for Embarcadero Delphi and potentially for FPC as well
- delphi
- key-deviation-algorithms
- cryptographic-checksums
- kdf1
Inspektor is a protocol-aware proxy that is used to enforce access policies👮
A Rails 6 boilerplate to create your next Saas product. Preloaded with graphQL, devise, JWT, CanCanCan, RailsAdmin, Rubocop, Rspec, i18n and more.
An SMTP Honeypot
The Volatility Collaborative GUI
- volatility-gui
- volatility-framework
- volatility
- memory-dump
Bluetooth Honeypot
High-performance pure-javascript SHA1 implementation suitable for large binary data, reaching up to half the native speed.
C++ application that uses memory and code hooks to detect packers
Script for automating Linux memory capture and analysis
Hashing for Modern Object Pascal
Who do websites think you are? A privacy self-check: every sniffer any site can run, the portrait they paint, and the contradictions that give away a VPN or proxy
Aggregates security advisories from 10 international CERTs daily and provides an AI skill that cross-references alerts against your project's tech stack.
Simple and secure hashing in Swift with the SipHash algorithm
Things we learned from Capture The Flag hacking competitions we participated in.
- hacking-competitions
- ctf-writeups
- ctf
- challenges
Web interface for the Volatility Memory Forensics Framework
Universal python API to captcha solving services
- captcha
- captcha-solving
- captcha-breaking
- recaptcha