Repository Index

Tool to gather Threat Intelligence indicators from publicly available sources

Defanged Indicator of Compromise (IOC) Extractor.

• ioc
• indicators-of-compromise
• library
• ioc-extractor

🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more

• tls
• ssl
• certificate
• keystore

Password cracking rules and masks for hashcat that I generated from cracked passwords.

Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux

:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.

teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.

• ids
• teler
• waf
• teler-ids

large hashcat rulesets generated from real-world compromised passwords

• hashcat
• hashcat-rules
• password-cracking
• security-research

A framework for automated extraction of static and dynamic features from Android applications

• android-malware-detection
• android-analysis

Simple promise-based session middleware for Next.js, micro, Express, and more

• javascript
• middleware
• session
• promise

DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.

• python
• malware-analysis
• automation
• config-dump

The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted drives and extracted artifacts from Windows, Linux, MacOS, and Android devices

Python installable command line utiltity for mitigation of host and key compromises.

Game Boy ROM disassembler with RGBDS compatible output

• rgbds
• disassembler
• reverse-engineering
• game-boy

Automatically exported from code.google.com/p/creddump

Pakkero is a binary packer written in Go made for fun and educational purpose. Its main goal is to take in input a program file (elf binary, script, even appimage) and compress it, protect it from tampering and intrusion.

• launcher
• payload
• elf
• elf-binaries

C++ application that uses memory and code hooks to detect packers

Aggregates security advisories from 10 international CERTs daily and provides an AI skill that cross-references alerts against your project's tech stack.

• cve
• security
• security-alerts
• vulnerability

Things we learned from Capture The Flag hacking competitions we participated in.

• hacking-competitions
• ctf-writeups
• ctf
• challenges

:elephant: :busts_in_silhouette: Manage PostgreSQL roles and privileges from YAML or LDAP

• ldap
• postgresql
• yaml
• roles

'Packet Capture Forensic Evidence eXtractor' is a tool that finds and extracts files from packet capture files

Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.

• ai-safety
• ai-security
• claude-code
• llm-agent

EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.

Protect your SIP Servers from bad actors at https://sentrypeer.org

• sip
• voip
• security-tools
• honeypot