Repository Index

CLI tool for decompiling Android apps to Java. It does resources! It does Java! Its real easy!

OpenXPKI Code

• pki
• enterprise-software
• workflow-based
• x509

Best Current Practices regarding secure online communication and configuration of services using cryptography.

• cryptography
• applied-cryptography
• documentation
• best-practices

Security Auditor Utility for GraphQL APIs

• security
• penetration-testing
• auditing
• graphql

A simple way of authenticating your RESTful APIs with API keys using Laravel

TranslatedFull-Chain Sentinel (全链哨兵, "full-chain sentinel") is a cybersecurity Agent that integrates web penetration testing, Android app security testing, iOS app security testing, batch target probing for offensive and defensive operations, automated emergency response, and open-source vulnerability monitoring. It is used to assist with automating security service delivery. Use for illegal purposes is prohibited.

• agent
• blue-team
• cybersecurity
• cybersecurity-tools

Scalpel is an open source data carving tool. It is not being actively maintained.

Safe, simple and fast JSON Web Tokens for Go

• jwt
• jwt-token
• jwt-claims
• dependency-free

Scirius is a web application for Suricata ruleset management and threat hunting.

• python
• security
• management
• interface

Single C file TLS 1.2/1.3 implementation, using tomcrypt as crypto library

• tls

ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.

• clamscan
• file-scanner
• virus-scan
• docker-compose

Galah: An LLM-powered web honeypot.

• golang
• honeypot
• llm
• openai

A tool for studying JavaScript malware.

• malware
• malwareanalysis
• nodejs
• es6

Fake sshd that logs ip addresses, usernames, and passwords.

MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.

Cryptographic signature algorithms: DSA, ECDSA, Ed25519

• ecdsa
• ed25519
• signatures
• dsa

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

• beacons
• blue-team
• c2
• command-and-control

A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule

List DTDs and generate XXE payloads using those local DTDs.

• xxe
• dtd
• security
• hacktoberfest

A mostly-serverless distributed hash cracking platform

Google OAuth Client Library for Java

A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)

• dns
• dns-rebinding
• hacking
• malicious-domains

CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.

Tool to gather Threat Intelligence indicators from publicly available sources