Repository Index

Patch-level verification for Bundler

• bundler-audit
• ruby-advisory-db
• ruby
• dependency-checker

This is the public repository for the CFR Java decompiler

Streamline your web application's authentication with Polis, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterprise-grade Single Sign-On, it also supports Directory Sync via the SCIM 2.0 protocol for automatic user and group provisioning/de-provisioning.

• enterprise-software
• saml
• saml2
• saml-service-provider

Java decompiler, assembler, and disassembler

Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.

• malloc
• security
• memory-allocation
• malloc-library

LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.

The first fruit of the Nüwa tree — an autonomous AI pentest legion (634-team champion, 8h unattended, 1B tokens beat 4.5B). Not just a tool: evolvable by design. Grow your own fruit on the Nüwa Foundation (Create/Language/History).

• ai-agents
• autonomous-agents
• claude-code
• ctf

A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.

Bloodhound Reporting for Blue and Purple Teams

• active
• directory
• blueteam
• purpleteam

A fast, memory efficient hash map for C++

• hash-tables
• sparse-containers
• unordered
• sparsehash

Digital Forensics artifact repository

AVML - Acquire Volatile Memory for Linux

• rust
• memory-forensics
• linux-security

ARES - authorized red-team engagement automation with dashboard, campaign scope, module orchestration, OPSEC controls, encrypted vault, and reporting.

• active-directory
• cloud-security
• defensive-validation
• fastapi

BitCracker is the first open source password cracking tool for memory units encrypted with BitLocker

• bitlocker
• password-cracker
• cuda
• cryptography

Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.

The repository host gives no description.

Scan files or process memory for CobaltStrike beacons and parse their configuration

OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications

• openam
• sso
• oauth
• saml

Dynamic unpacker based on PE-sieve

• libpeconv
• pe-sieve
• memory-forensics
• malware-unpacker

Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)

• powershell
• golang
• python
• clueless-agents

WinDBG Anti-RootKit Extension

• kernel-mode
• c-plus-plus
• malware
• malware-analysis

Paaster is a secure and user-friendly pastebin application that prioritizes privacy and simplicity. With end-to-end encryption and paste history, Paaster ensures that your pasted code remains confidential and accessible.

• pastebin
• paaster
• e2ee
• paste

A tool for deploying and detecting use of Active Directory honeytokens

Volatility plugin for extracts configuration data of known malware

• malware
• volatility
• forensics
• python