A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
Repository Index
61,121 visible repositories in the index
433–456 of 812 · Most stars
CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
Tiny hashing module that uses the native crypto API in Node.js and the browser
WinDBG Anti-RootKit Extension
- kernel-mode
- c-plus-plus
- malware
- malware-analysis
Who do websites think you are? A privacy self-check: every sniffer any site can run, the portrait they paint, and the contradictions that give away a VPN or proxy
- browser-fingerprinting
- cloudflare-workers
- dns-leak
- network-tools
:no_entry: (DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
Go-Guardian is a golang library that provides a simple, clean, and idiomatic way to create powerful modern API and web authentication.
Local-first password manager with direct device-to-device sync
- password-manager
- totp-authenticator
- security
- security-tools
Incident Response Forensic Framework
OpenSOC Apache Hadoop Code
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
- xss
- bxss
- security
- bugbounty
Python tool for aircraft Doppler audio geolocation using historical ADS-B flight data (Source-available)
- ads-b
- airplane
- doppler-effect
- geolocation
Password cracking rules and masks for hashcat that I generated from cracked passwords.
Paaster is a secure and user-friendly pastebin application that prioritizes privacy and simplicity. With end-to-end encryption and paste history, Paaster ensures that your pasted code remains confidential and accessible.
- pastebin
- paaster
- e2ee
- paste
🔒Unified API for password hashing algorithms
DFIRTrack - The Incident Response Tracking Application
- incident-response
- digital-forensics
- dfir
- incident-response-tooling
Yet another static code analyzer for malicious Android applications
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
- blue-team
- detection-engineering
- edr
- endpoint-detection
honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway
Collection of example YARA-L rules for use within Google Security Operations
Django web application to store and manage vouchers, coupons, loyalty and gift cards digitally. Supports PWA, offline caching, expiry notifications, transaction histories, file uploads and OIDC SSO.
- coupons
- vouchers
- conventional-commits
- apprise
Catch risky npm dependency changes before they merge.
- dependency-analysis
- devsecops
- github-actions
- malware
Using Intel's PIN tool to solve CTF problems
- ctf
- pin
- reverse-engineering
- instruction-counting
A front-end JavaScript toolkit for creating DNS rebinding attacks.