inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques
File Scanning Framework
:hammer: A multiple reverse shell session/client manager via terminal
- socket
- python
- ctf
- attack-defense
The repository host gives no description.
Django application that performs SAST and Malware Analysis for Android APKs
collection of C/C++ programs that try to get compilers to exploit undefined behavior
Open-source cross-platform defensive spyware, stalkerware and surveillance software detector
:mailbox: The Phishing Intelligence Engine - An Active Defense PowerShell Framework for Phishing Defense with Office 365
Generate graphs and charts based on password cracking result
Validates passwords against PHP's password_hash function using PASSWORD_DEFAULT. Will rehash when needed, and will upgrade legacy passwords with the Upgrade decorator.
Add a layer of active defense to your cloud applications.
Web interface to explore Suricata EVE outputs
- attack-defense-ctf
- ctf
- network-monitor
- suricata
EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
Defensomania is a security monitoring and incident response card game.
K8s API Honeypot with Active Defense Capabilities
Data policy IN, dynamic view OUT: PACE is the Policy As Code Engine. It helps you to programatically create and apply a data policy to a processing platform like Databricks, Snowflake or BigQuery (or plain 'ol Postgres, even!) with definitions imported from Collibra, Datahub, ODD and the like.
- data-catalog
- data-processing
- policy-enforcement
- bigquery
A tool designed for consistent and safe capture of off network web resources.
Attack tool for altering packed samples so that they evade static packing detection
- adversarial
- attack-defense
- evasion
- executable-packing
An auth policy for the Pyramid Web Framework with sane defaults.
[WIP] Another authentication hex for Phoenix.
Encrypted .env files with TOTP unsealing for production deploys. Cross-stack (Node + Java). Zero deps. Defends against npm supply-chain attacks.
Sigma Queries turned into KQL for Defender using pysigma - Automated
- detection-engineering
- kql
- microsoftsentinel
- mitre-attack
Package to set up autonomous agents to trade on TBD