Repository Index

Exploitation Framework for Embedded Devices

• python
• security
• infosec
• router-exploitation-framework

Small and highly portable detection tests based on MITRE's ATT&CK.

• mitre
• mitre-attack

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

• vuls
• vulnerability-scanners
• golang
• go

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

• kubernetes
• security
• nsa
• mitre-attack

TranslatedA comprehensive security assessment tool developed in-house by Chaitin (长亭), supporting scanning for common web security issues and custom PoCs | Be sure to read the documentation before use

• security
• vulnerability
• vulnerability-scanner
• passive-vulnerability-scanner

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .

• thefatrat
• bypass
• linux
• autorun

Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.

• sn1per
• sn1per-professional
• bugbounty-platform
• attack-surface

Extremely fast non-cryptographic hash algorithm

• xxhash
• smhasher
• hash-functions
• c

CryptoSwift is a growing collection of standard and secure cryptographic algorithms implemented in Swift

• swift
• aes
• cryptography
• commoncrypto

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

📱 objection - runtime mobile exploration

• mobile
• pentest
• framework
• ios

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

Malicious traffic detection system

• security
• malware
• intrusion-detection
• sensor

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

• anti-analysis
• anti-debugging
• anti-sandbox
• anti-vm

Infection Monkey - An open-source adversary emulation platform

• penetration-testing
• security-tools
• security-automation
• infection-monkey

A native macOS KeePass client

• keepass
• kdbx
• macpass
• password-manager

A library for patching, replacing and decorating .NET and Mono methods during runtime

• csharp
• patcher
• detour
• detours

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

• misp
• threat-sharing
• threat-hunting
• threatintel

Common User Passwords Profiler (CUPP)

• wordlist-generator
• wordlist
• dictionary-attack
• password

the official Rust and C implementations of the BLAKE3 cryptographic hash function

Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!

• password-manager
• passbolt
• security
• cakephp

Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

• aws
• compliance
• cloud
• rules-engine

Automated Αll-in-One OS command injection exploitation tool.

• python
• command-injection
• detection
• exploitation