47,133 repositories indexed
49–72 of 105 · Most stars
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
Hacking Toolkit
An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)
Agent-first reverse engineering for macOS, Windows and Linux: any ACP agent reads, renames and patches binaries, Android apps and GPU kernels next to you.
🔑 Local-first Secrets Manager
Customizable Linux Persistence Tool for Security Research and Detection Engineering.
Run programs on linux with selectively restricted permissions.
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
ebpfkit is a rootkit powered by eBPF
Bluetooth experimentation framework for Broadcom and Cypress chips.
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.
Modular file scanning/analysis framework
Linker/Compiler/Tool detector for Windows, Linux and MacOS.
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
A secure password manager for macOS,Linux and Windows platforms
Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
Samsung Tizen root
A Linux packet crafting tool.
Drltrace is a library calls tracer for Windows and Linux applications.
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools
Not actively maintained - Authentication library for Phoenix, and other Plug-based, web applications
The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted drives and extracted artifacts from Windows, Linux, MacOS, and Android devices