Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- beacons
- blue-team
- c2
- command-and-control
Repository Index
47,133 repositories indexed
73–96 of 157 · Most stars
Charm: A Framework for Rapidly Prototyping Cryptosystems
- python
- cryptography
- prototyping
User management lib for Phoenix Framework
PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
Modular file scanning/analysis framework
- python
- analytic-machines
- analysis-framework
- python-script
Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
- security-tools
- security
- attestation
- verification
Incident Response Forensic Framework
DNS Rebinding Exploitation Framework
:hatching_chick: Elixir authorization and resource-loading library for Plug applications.
- elixir
- plug
- phoenix-application
- authorization
OWASP Honeypot, Automated Deception Framework.
- owasp
- honeypot
- honeynet
- deception
Rest API boilerplate for Lumen micro-framework.
Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF
- owasp
- ctf
- ctfd
- application-security
Not actively maintained - Authentication library for Phoenix, and other Plug-based, web applications
- phoenix-framework
- elixir
Heimdall is a wrapper around the Security framework for simple encryption/decryption operations.
Web App for Volatility framework
A framework for automated extraction of static and dynamic features from Android applications
- android-malware-detection
- android-analysis
A Python RESTful API framework for online malware analysis and threat intelligence services.
A framework for orchestrating forensic collection, processing and data export
DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.
- python
- malware-analysis
- automation
- config-dump
A plugin for Microsoft.EntityFrameworkCore to add support of encrypted fields using built-in or custom encryption providers.
- entity-framework-core
- plugin
- encryption
- netstandard
File Scanning Framework
- security-tools
- network-defense
- file-analysis
- file-analyzer
ROPMEMU is a framework to analyze, dissect and decompile complex code-reuse attacks.
The Volatility Collaborative GUI
- volatility-gui
- volatility-framework
- volatility
- memory-dump
🍍Jeff provides the simplest way to manage web sessions in Go.
- golang
- sessions
- http
- session-management