Repository Index

honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway

• honeytoken
• honeypot
• security
• deception

Collection of example YARA-L rules for use within Google Security Operations

A front-end JavaScript toolkit for creating DNS rebinding attacks.

• dns-rebinding
• dns
• hacking
• red-team

Fast HTTP enumerator

• http
• fuzz
• fuzzer
• enumerator

DNS Rebinding Exploitation Framework

• dns-rebinding
• red-team
• hacking
• web-hacking

:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.

:hatching_chick: Elixir authorization and resource-loading library for Plug applications.

• elixir
• plug
• phoenix-application
• authorization

OWASP Honeypot, Automated Deception Framework.

• owasp
• honeypot
• honeynet
• deception

Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF

• owasp
• ctf
• ctfd
• application-security

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

• threat
• hunt
• red
• blue

Rest API boilerplate for Lumen micro-framework.

• rest-api
• lumen
• laravel
• lumen-micro-framework

Remote forensics meta tool

Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js

• malware-samples
• wscript
• deobfuscation
• angler

MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.

• python
• mqtt
• mqtt-broker
• mqtt-client

Mellivora is a CTF engine written in PHP

YakTrace reveals when multiple Yik Yak posts were made by the same anonymous account and organizes them into a local PDF dossier. Built on the sidechat.js API project.

• 0-day
• 0-day-exploit
• proof-of-concept
• vulnerability

A simple PHP Authentication that enables steam users to log into their steam account to access content!

Cyber Incident Response Team Playbook Battle Cards

• playbook-battle-cards
• cybersecurity
• cyber-threats
• cyber-security-team

:hammer: Manage your website via terminal

• php
• security-tools
• python
• pentest

Very simple SAML 2.0 consumer module for ASP.NET/C#

• saml
• asp-net
• single-sign-on
• asp-net-mvc

Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools

Not actively maintained - Authentication library for Phoenix, and other Plug-based, web applications

• phoenix-framework
• elixir

Heimdall is a wrapper around the Security framework for simple encryption/decryption operations.

• swift
• ios
• security
• rsa

Delphi Detours Library

• hooks
• detours
• x86-64
• windows