The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
Safely pass trusted data to untrusted environments and back.
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
Windows Events Attack Samples
Search and browse documents and data; find the people and companies you look for.
Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.
Awesome Django authorization, without the database
NIST Certified SCAP 1.2 toolkit
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
detect stegano-hidden data in PNG & BMP
Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.
Secure Vault for Customer PII/PHI/PCI/KYC Records
Strategies to Gekko trading bot with backtests results and some useful tools.
- gekko
- strategies
- gekko-strategies
- gekko-backtest
Find exploit tool
Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.
Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.
- chat-archive
- python
- secret-scanning
- sqlite
Authenticated Encryption with Associated Data Algorithms: high-level encryption ciphers
Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
A machine learning tool that ranks strings based on their relevance for malware analysis.
Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.
ObjectivePGP is an open-source library for iOS and macOS that provides developers with tools for implementing OpenPGP encryption and decryption, digital signing, and signature verification in their applications, thereby enhancing security and data integrity.
Scalpel is an open source data carving tool. It is not being actively maintained.
Modular file scanning/analysis framework
- python
- analytic-machines
- analysis-framework
- python-script