Repository Index

:rocket: An open source alternative to searx which provides a modern-looking :sparkles:, lightning-fast :zap:, privacy respecting :disguised_face:, secure :lock: meta search engine

• meta-search-engine
• rust
• search-engine
• fast

A collection of AWS penetration testing junk

Package gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services 🔒

• csrf-protection
• gorilla
• middleware
• golang

Reverse engineer anything with agents, from app behavior down to native binaries.

PE Tools - Portable executable (PE) manipulation toolkit

• pefile
• hex-editor
• disassembler
• entropy

Program to reverse Docker images into Dockerfiles

• security-tools
• security
• docker-security
• reverse-engineering

Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.

• digital-security
• forensics
• incident-response
• ioc

Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0

• android-unpacker
• gdb
• qemu
• reverse-engineering

Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group).

• dfir
• dissect
• python

A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis

• mobile-security
• android
• malware-analyzer
• penetration-testing

A Laravel 5.8 API Boilerplate to create a ready-to-use REST API in seconds.

• laravel
• api
• rest
• jwt

HellPot is a cross-platform portal to endless suffering meant to punish unruly HTTP bots.

• honeypot
• http
• web
• deception

A pure Python HTML5 parser that just works. No C extensions to compile. No system dependencies to install. No complex API to learn.

• html5
• parser
• python
• html

TranslatedA lightweight DDD forward/reverse business modeling framework that supports the architectural evolution of complex business systems!

• ddd
• extension
• ddd-architecture
• clean-architecture

A static analyzer for PE executables.

• malware
• static
• analysis
• pe

An information security preparedness tool to do adversarial simulation.

• uber
• vagrant
• yaml
• celery

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

• cybersecurity
• threat
• ioc
• malware

An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction

• crypto
• cryptography
• encryption
• security

Encrypt/Decrypt: AES. Hash: MD5, SHA(SHA1, SHA224, SHA256, SHA384, SHA512). Encode/Decode: Base64, Hex.

Laravel Ban simplify blocking and banning Eloquent models.

• laravel
• eloquent
• cog
• trait

Protect against malicious open source packages 🤖

• devsecops
• security
• supply-chain-security
• policy-as-code

SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.

• sip
• voip
• password-cracker
• svwar

Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.

A simple, semantic and developer-friendly crypto package for golang

• aes
• rsa
• des
• 3des