IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
- cybersecurity
- threat
- ioc
- malware
Repository Index
72,862 visible repositories in the index
673–696 of 1,243 · Most stars
An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
A Game of Hackers (CTF Scoreboard & Game Manager)
Protect against malicious open source packages 🤖
Generate smart and powerful wordlists
- wordlist
- password
- hacking-tool
- password-cracking
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
- sip
- voip
- password-cracker
- svwar
Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.
A simple, semantic and developer-friendly crypto package for golang
- aes
- rsa
- des
- 3des
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
- cve-scanning
- pentesting-tools
- rust
- vulnerability-scanners
Wordlist, rules and masks from Kaonashi project (RootedCON 2019)
- wordlist
- password
- password-strength
- password-safety
macOS (& ios) Artifact Parsing Tool
A captcha library that generates audio and image CAPTCHAs.
A linux utility for generating 2FA codes for Steam and managing Steam trade, market, and other confirmations.
- steam
- steamguard-cli
- linux-utility
- sda
Mundane is a Rust cryptography library backed by BoringSSL that is difficult to misuse, ergonomic, and performant (in that order).
- cryptography
- rust
- boringssl
Simple yet powerful authorization / authentication client library for Python web applications.
- python
- authentication
- oauth2-client
- oauth-client
Limit access to your Laravel applications by using invite codes
- php
- laravel
- laravel-package
- doorman
ARES - authorized red-team engagement automation with dashboard, campaign scope, module orchestration, OPSEC controls, encrypted vault, and reporting.
- active-directory
- cloud-security
- defensive-validation
- fastapi
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
Seemingly normal USB drive with a hidden security feature
RockYou2021.txt is a MASSIVE WORDLIST compiled of various other wordlists. RockYou2021.txt DOES NOT CONTAIN USER:PASS logins!
- wordlist
- rockyou
- rockyou2021
- wordlists
Ultimate Javascript Object Signing and Encryption (JOSE), JSON Web Token (JWT) and Json Web Keys (JWK) Implementation for .NET and .NET Core
- jose
- jwt
- json
- jwa
passfab-unlocker: Standalone Offline Password Recovery Solution
- automation
- desktop
- developer-tools
- device-recovery
Agent-first reverse engineering for macOS, Windows and Linux: any ACP agent reads, renames and patches binaries, Android apps and GPU kernels next to you.
30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)
- pypi
- monitoring-tool
- network-analysis
- malware-analysis