47,133 repositories indexed
25–48 of 75 · Most stars
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
Extract and aggregate threat intelligence.
Dynamic unpacker based on PE-sieve
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
Dynamic analysis of Android apps
HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.
Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.
Defanged Indicator of Compromise (IOC) Extractor.
Mellivora is a CTF engine written in PHP
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools
A framework for automated extraction of static and dynamic features from Android applications
C++11 header-only message digest library
A SDK for the creation of analysis tools without obtaining app source code in order to profile runtime performance, examine code coverage, and track high-risk behaviors of a given app on Android 5.0 and above.
Open-source cross-platform defensive spyware, stalkerware and surveillance software detector
The Redexer binary instrumentation framework for Dalvik bytecode
Minimal, consistent Python API for building integrations with malware sandboxes.
Open-source agentic security operations platform:
Python API Monitor for Android apps
Blazor.BFF.AzureAD.Template, Blazor WASM hosted in ASP.NET Core using Microsoft Entra ID BFF (server authentication)
Dynamically generate self-signed certificates and certificate authorities for Go tests
JWT authentication for Pyramid
Framework agnostic set of sqlalchemy classes that make building applications that require permissions an easy task.
Mimicry is a dynamic deception tool that actively deceives an attacker during exploitation and post-exploitation.
An ICAP Server with yara scanner for URL and content.