Repository Index

Yet another static code analyzer for malicious Android applications

dll injection tool that implements various methods

:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.

Investigate suspicious activity by visualizing Sysmon's event log

• security
• kibana
• elasticsearch
• sysmon

teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.

• ids
• teler
• waf
• teler-ids

Oath is rails authentication made simple. Previously known as Monban

Various wordlists FR & EN - Cracking French passwords

• wordlists
• hashcat
• french
• cracking-hashes

Splunk code (SPL) for serious threat hunters and detection engineers.

• splunk
• threat-hunting
• use-case
• siem

A modular Python application to collect intelligence for malicious hosts.

• cybersecurity
• investigation

Incident Response - Fast suspicious file finder

• dfir
• investigation
• incident-response
• threat-hunting

PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡

• proxy
• tcp
• tcp-proxy
• penetration-testing

:vertical_traffic_light: Block malicious crawlers with Cloudflare Firewall Rules

• cloudflare
• firewall
• user-agent
• firewall-rules

Wraps around various tools and provides some additional checks/information to produce a centralized report of a PE file.

A modular Python application to pull intelligence about malicious files

• malware-analysis
• malware-research
• investigation
• cybersecurity

Keeper Password Manager: 256-bit AES Encryption and Two-Step Authentication for Secure Data Storage

• download-keeper
• home-security
• keeper-free
• keeper-latest-version

Searches various online resources to try and get as much info about an IP/domain as possible.

The current repository contains all the scripts needed to build kernel-mode mac-a-mal malicious activity hooking on macOS.

• macos

YALIH (Yet Another Low Interaction Honeyclient) is a low Interaction Client honeypot designed to detect malicious websites through signature, anomaly and pattern matching techniques

Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness.

XSSMaze is a web service designed to test and improve the performance of security testing tools by providing various cases of XSS vulnerabilities.

• crystal-lang
• hacking
• security
• vulnapp

Plug that adds various HTTP Headers to make Phoenix/Elixir app more secure

• hex
• plug
• phoenix
• elixir

Mojolicious app to display statistics for your kippo SSH honeypot

🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.

• ansible
• ansible-playbook
• devsecops
• infrastructure-as-code

Detect the Shai Hulud 2.0 npm supply chain attack (796+ packages). Scans for malicious files, hashes, and compromised ecosystems. Fast, accurate scanner.

• cdn
• cve
• polyfill
• polyfill-io