Repository Index

CLI tool for decompiling Android apps to Java. It does resources! It does Java! Its real easy!

OpenXPKI Code

• pki
• enterprise-software
• workflow-based
• x509

Best Current Practices regarding secure online communication and configuration of services using cryptography.

• cryptography
• applied-cryptography
• documentation
• best-practices

Security Auditor Utility for GraphQL APIs

• security
• penetration-testing
• auditing
• graphql

A simple way of authenticating your RESTful APIs with API keys using Laravel

Scalpel is an open source data carving tool. It is not being actively maintained.

Safe, simple and fast JSON Web Tokens for Go

• jwt
• jwt-token
• jwt-claims
• dependency-free

Scirius is a web application for Suricata ruleset management and threat hunting.

• python
• security
• management
• interface

Single C file TLS 1.2/1.3 implementation, using tomcrypt as crypto library

• tls

ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.

• clamscan
• file-scanner
• virus-scan
• docker-compose

Translated全链哨兵 (Quanlian Shaobing, "full-chain sentinel") is a cybersecurity Agent that integrates Web penetration testing, Android App security testing, iOS APP security toilet, batch targeting for attack and defense, automated emergency response, and open-source vulnerability monitoring. It is used to assist with automating security service delivery. Use for illegal purposes is prohibited.

• agent
• blue-team
• cybersecurity
• cybersecurity-tools

A tool for studying JavaScript malware.

• malware
• malwareanalysis
• nodejs
• es6

Galah: An LLM-powered web honeypot.

• golang
• honeypot
• llm
• openai

Fake sshd that logs ip addresses, usernames, and passwords.

MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.

Cryptographic signature algorithms: DSA, ECDSA, Ed25519

• ecdsa
• ed25519
• signatures
• dsa

A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

• beacons
• blue-team
• c2
• command-and-control

eXtended Keccak Code Package

List DTDs and generate XXE payloads using those local DTDs.

• xxe
• dtd
• security
• hacktoberfest

A mostly-serverless distributed hash cracking platform

Google OAuth Client Library for Java

A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)

• dns
• dns-rebinding
• hacking
• malicious-domains

CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.