Repository Index

bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS

• sanitization
• html
• security
• xss

Rapidly Search and Hunt through Windows Forensic Artefacts

• attack
• rust
• security
• threat-hunting

A fast sub domain brute tool for pentesters

Atomic and non-atomic counters and rate limiting tools. Limit resource access at any scale.

• security
• limit
• ratelimter
• bruteforce

Wireless keystroke injection attack platform

• esp8266
• arduino
• hid
• hacktoberfest

Manages application of security headers with many safe defaults

• secure-headers
• csp
• hsts
• referrer-policy

SteamKit2 is a .NET library designed to interoperate with Valve's Steam network. It aims to provide a simple, yet extensible, interface to perform various actions on the network.

• steamkit2
• c-sharp
• nuget
• steam

Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime

• mobile-security
• android-security
• frida
• reverse-engineering

Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.

• reverse-engineering
• disassembler
• capstone
• x86

🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.

• cloudflare
• pentest-tool
• pentest
• censys

AuthPass - Password Manager based on Flutter for all platforms. Keepass 2.x (KDBX 3 and KDBX 4) compatible.

• flutter
• password-manager
• password-store
• android

HTTP Session Management for Go

• go
• golang
• session
• sessions

Entity Framework Core Power Tools - reverse engineering, migrations and model visualization in Visual Studio & CLI

• entity-framework-core
• visual-studio
• entity-framework
• model-visualization

LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)

• rootkit
• lkm-rootkit
• c
• kernel

OAuth client integration for Symfony. Supports both OAuth1.0a and OAuth2.

• php
• symfony
• symfony-bundle
• authentication

A tool to abuse Exchange services

• mapi
• exchange
• shells
• pentesting

Streamline your web application's authentication with Polis, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterprise-grade Single Sign-On, it also supports Directory Sync via the SCIM 2.0 protocol for automatic user and group provisioning/de-provisioning.

• enterprise-software
• saml
• saml2
• saml-service-provider

Crack legacy zip encryption with Biham and Kocher's known plaintext attack.

• crack
• zip
• multithread
• attack

XSS'OR - Hack with JavaScript.

• probe
• pentest-tool
• xss
• csrf

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte

• incident-response
• malware-detection
• persistence
• powershell

Tool for advanced mining for content on Github

• gitminer
• information-gathering-tool
• git-mining-tool

Reverse Shell as a Service

• reverse-shell
• exploit
• vulnerability
• pentesting

Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.

• malloc
• security
• memory-allocation
• malloc-library

LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.