Repository Index

A Simple Elasticsearch Honeypot

Malware Analysis Tool using Function Level Fuzzy Hashing

Open-source OSINT intelligence dashboard tracking the Iran conflict in real time — live DeckGL/MapLibre conflict map, 30 bias-labeled feeds, actor dossiers, and daily briefs. Live at conflicts.app.

• deckgl
• geopolitics
• intelligence
• maplibre

Utility that exposes the expiry of TLS certificates as Prometheus metrics

Invoke-LiveResponse

• ir
• dfir
• winrm
• liveresponse

NeuraVision — AI content generation platform (PHP backend engine: auth, credits, generation, analytics)

• ab-testing
• ai-platform
• analytics
• backend-api

Digital Forensics Artifacts Knowledge Base

🪓 High-Speed Log Analysis & Forensics Tool - Part of NullSec Toolkit

• c
• forensics
• log-analysis
• security

Tool used for dumping memory from Android devices

NullKia Mobile Security Framework - Tools in Nim, Crystal, V, D, Red, Odin, Haxe, Zig, Kotlin, Lua, PHP, Python | bad-antics | github.com/bad-antics

• android-hacking
• baseband
• bootloader-unlock
• checkm8

A short and small memory forensics helper.

• python
• volatility
• memory-forensics

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.

• bpf
• ebpf
• forensics
• golang

Forensic tool for acquisition, triage and analysis of remote block devices via iSCSI protocol.

• acquisition
• cybersecurity
• forensics
• iscsi

Helper functions and socket classes to perform TLS communication by means of WinAPI (SChannel)

• tls
• delphi
• schannel
• winapi

ESPot - ElasticSearch Honeypot

Mojolicious app to display statistics for your kippo SSH honeypot

Go package for IP2Location.io. Fetch geolocation and proxy data for an IP address, or query WHOIS details for a domain. Integrate an IP geolocation API into Golang backends, microservices and command-line tools. Enrich IPv4 and IPv6 traffic with location intelligence and network details for analytics and security use cases.

• domain-lookup
• golang
• ip-geolocation
• ip2location

🔥 n01d-forge - Secure Cross-Platform Image Burner with Encryption | LUKS, VeraCrypt, Secure Erase, Hash Verification

• bootable-usb
• cross-platform
• encryption
• etcher-alternative

A credential dumping SSH honeypot with statistics

Honeypot that mimics Tomcat manager endpoints. Logs requests and saves attacker's WAR file for later study

• honeypot
• spring-boot
• tomcat

🔌 OSINT & Security Extensions for Marshall Browser - Installable plugins for enhanced reconnaissance and security testing

• browser-extension
• golang
• honeypot
• osint

Ruby gem for the IP2Location.io API. Look up geolocation and proxy information by IP address, and retrieve WHOIS data by domain. Integrate a hosted IP geolocation API into Ruby applications and backend workflows. Enrich IPv4 and IPv6 addresses with geographic and network details for analytics, localization and security checks.

• domain-lookup
• geolocation-api
• ip-geolocation
• ip2location

easy honeypot statistics

Implementation of the packing detection heuristic from the paper "Packed PE File Detection for Malware Forensics" of Han et al.

• binary-analysis
• entropy
• entrypoint
• executable-packing