Repository Index

JShell - Get a JavaScript shell with XSS.

Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.

• blue-team
• detection-engineering
• edr
• endpoint-detection

honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway

• honeytoken
• honeypot
• security
• deception

A colleciton of CTF write-ups all using pwntools

Fastest 5KB JS implementation of ed25519 signatures

• ed25519
• curve25519
• eddsa
• cryptography

Collection of example YARA-L rules for use within Google Security Operations

Samsung Tizen root

• embedded-linux
• firmware-analysis
• hardware-hacking
• mali-gpu

Delphi implementation of JOSE (JSON Object Signing and Encryption) and JWT (JSON Web Token)

• auth
• delphi
• jwt
• jwt-authentication

Users Plugin for CakePHP

• cakephp
• users
• plugin
• registration

A secure password manager for macOS,Linux and Windows platforms

Custom apps for the iDrive 7 head unit (shift lights, virtual dyno, brake and drag timers, G-meter, fault scanner) plus an SDK kit to build and install your own.

• automotive
• bmw
• car-hacking
• head-unit

Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux

High-Performance word generator with a per-position configureable charset

Django web application to store and manage vouchers, coupons, loyalty and gift cards digitally. Supports PWA, offline caching, expiry notifications, transaction histories, file uploads and OIDC SSO.

• coupons
• vouchers
• conventional-commits
• apprise

🌰 encrypt/decrypt using ssh keys

• encryption
• aes-256
• ssh
• ssh-keys

Catch risky npm dependency changes before they merge.

• dependency-analysis
• devsecops
• github-actions
• malware

A front-end JavaScript toolkit for creating DNS rebinding attacks.

• dns-rebinding
• dns
• hacking
• red-team

A tool for deploying and detecting use of Active Directory honeytokens

dll injection tool that implements various methods

Standalone password candidate generator using the PRINCE algorithm

Fast HTTP enumerator

• http
• fuzz
• fuzzer
• enumerator

Volatility plugin for extracts configuration data of known malware

• malware
• volatility
• forensics
• python

DNS Rebinding Exploitation Framework

• dns-rebinding
• red-team
• hacking
• web-hacking

Integrated certification via Let's encrypt for Elixir-powered sites