Repository Index

Real-time network traffic analysis in your terminal.

• cli
• ddos
• ddos-detection
• go

A script to automate the creation of cloud infrastructure for hash cracking.

• redteam-infrastructure
• redteaming
• pentest-tool
• password-cracker

Go package for IP2Location.io. Fetch geolocation and proxy data for an IP address, or query WHOIS details for a domain. Integrate an IP geolocation API into Golang backends, microservices and command-line tools. Enrich IPv4 and IPv6 traffic with location intelligence and network details for analytics and security use cases.

• domain-lookup
• golang
• ip-geolocation
• ip2location

Quickly look up hashes in your terminal using the HashMob API 🔥

• data-breaches
• hash-cracking
• hash-lookup
• hashcat

:closed_lock_with_key: Middleware for keeping track of users, login states and permissions

• bcrypt
• middleware
• permissions
• redis

🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.

• ansible
• ansible-playbook
• devsecops
• infrastructure-as-code

A simple packer working with all PE files which cipher your exe with a XOR implementation

• dotnet
• packer
• xor
• encryption

Honeypot that mimics Tomcat manager endpoints. Logs requests and saves attacker's WAR file for later study

• honeypot
• spring-boot
• tomcat

Attack Community Graphs through Event Clustering

A packer identification tool/library.

Provides LDAP authentication services for your Pyramid application based on the ldap3 package.

• python
• ldap
• pyramid
• authentication

Kippo configured to be a backdoored netscreen

A Python framework that uses machine learning algorithms to implement the metadata recovery attack against obfuscated programs.

Use multiple authentication policies with Pyramid.

A utility package for Google Apis in Blazor.

• auth
• blazor
• blazor-client
• blazor-server

Encrypted .env files with TOTP unsealing for production deploys. Cross-stack (Node + Java). Zero deps. Defends against npm supply-chain attacks.

• 2fa
• aes-gcm
• dotenv
• encryption

Hudinx is a tiny interaction SSH honeypot engineered in Python to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker.

• honeypot
• engineering
• python
• attacker

Fetch and normalize parameterized URLs from the Wayback CDX API (OSINT, inspired by ParamSpider).

• bugbounty
• cdx
• cli
• kali-linux

Generate wordlists of Danish phone numbers by area and/or usage (Mobile, landline etc.) Useful for password cracking or fuzzing Danish targets.

• fuzzing
• infosec
• osint
• pentesting

Ruby gem for the IP2Location.io API. Look up geolocation and proxy information by IP address, and retrieve WHOIS data by domain. Integrate a hosted IP geolocation API into Ruby applications and backend workflows. Enrich IPv4 and IPv6 addresses with geographic and network details for analytics, localization and security checks.

• domain-lookup
• geolocation-api
• ip-geolocation
• ip2location

A Python module to encrypt and decrypt data with AES-128 CFB mode.

A standalone fast word generator in the spirit of hashcat's mask generator with unicode support

• hashcat
• hashcat-masks
• password-cracking
• word-generator

Sigma Queries turned into KQL for Defender using pysigma - Automated

• detection-engineering
• kql
• microsoftsentinel
• mitre-attack

TerraSigma - Modern Detection Engineering for the Cloud-Native SIEM Microsoft Sentinel

• cybersecurity
• detection-engineering
• devops
• kql