Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.
Repository Index
47,133 repositories indexed
25–48 of 68 · Most stars
Run programs on linux with selectively restricted permissions.
- python
- security
- containers
- docker
ebpfkit is a rootkit powered by eBPF
Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
- oauth2
- openid
- openid-connect
- oidc
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more
OmniAuth strategy for Twitter
Forensics artefact collection tool for systems running Microsoft Windows
- dfir
- incident-response
- collection
JSON Web Token library for C++
- cpp11
- cpp14
- cpp17
- jwt
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools
Not actively maintained - Authentication library for Phoenix, and other Plug-based, web applications
- phoenix-framework
- elixir
Delphi Detours Library
- hooks
- detours
- x86-64
- windows
A patch analysis tool
🚀AutoRuns is a PowerShell module that will help do live incident response and enumerate autoruns artifacts that may be used by legitimate programs as well as malware to achieve persistence.
A Simple Linux ELF Runtime Crypter
Who do websites think you are? A privacy self-check: every sniffer any site can run, the portrait they paint, and the contradictions that give away a VPN or proxy
- browser-fingerprinting
- cloudflare-workers
- dns-leak
- network-tools
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.
- ai-safety
- ai-security
- claude-code
- llm-agent
A SDK for the creation of analysis tools without obtaining app source code in order to profile runtime performance, examine code coverage, and track high-risk behaviors of a given app on Android 5.0 and above.
- binary-instrument
- android
- malware-research
- reverse-engineering
Delphi debug framework
- debug
- stacktrace
- disassembler
- portable-executable
TranslatedPassword generation tool: flexible and scriptable password dictionary generator which can support brute-force, combination, complex rule mode etc...
- password-generator
- password-dictionaries
- wordlist-generator
- brute-force
Check a seller, recruiter or landlord against 3,400+ public sources before you trust them. A verdict in plain words and a saved receipt behind every finding. Runs on your PC.
A platform to develop, run and administer CTF competitions. This is the online echoCTF.RED platform source code
- ctf
- echoctf
- cybersecurity
- hacking
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
Hush is a runtime configuration loader for Elixir applications
- elixir
- aws
- hush
- secret-management