LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.
Repository Index
47,133 repositories indexed
73–96 of 358 · Most stars
finds publicly known security vulnerabilities in a website's frontend JavaScript libraries
- security-vulnerabilities
- security
- vulnerabilities
- lighthouse
Your Everyday Threat Intelligence
- infosec
- threatintel
- threat-sharing
- threat-hunting
A One Time Password Authentication package, compatible with Google Authenticator.
- php
- 2fa
- two-factor-authentication
- google2fa
pwning IPv4 via IPv6
Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection
- ida-plugin
- taint-analysis
- reverse-engineering
- disassembly
LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.
- libtomcrypt
- cryptography
- c
- encryption
An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
An Elixir Authentication System for Plug-based Web Applications
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
Robust, modular, and extendable user authentication system
- phoenix
- authentication
- authorization
- user-management
Collaborative Incident Response platform
- forensic
- incident-response
- csirt-tooling
- python
A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.
Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox
- google-chrome
- hindsight
- chrome
- forensics
A key value store for storing per-developer environment and application keys
UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.
- incident-response
- forensics
- computer-forensics
- triage
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
PowerForensics provides an all in one platform for live disk forensic analysis
Bloodhound Reporting for Blue and Purple Teams
- active
- directory
- blueteam
- purpleteam
DRAKVUF Black-box Binary Analysis
- malware-analysis
- virtualization
- xen
- introspection
Coherence is a full featured, configurable authentication system for Phoenix
- elixir
- phoenix-framework
- authentication
- hex
Procyon is a suite of Java metaprogramming tools, including a rich reflection API, a LINQ-inspired expression tree API for runtime code generation, and a Java decompiler.
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
- digital-security
- forensics
- incident-response
- ioc