"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
Repository Index
47,133 repositories indexed
73–96 of 163 · Most stars
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
- golang
- http-server
- https-server
- ctf
30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)
- pypi
- monitoring-tool
- network-analysis
- malware-analysis
An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)
- elliot
- cupp
- passwords
- hacking-tool
🔑 Local-first Secrets Manager
- password
- password-manager
- desktop
- credentials
ebpfkit is a rootkit powered by eBPF
A KeePass-compatible password and secrets manager for people who work with AI agents.
The AI Agent for Cyber Security.
- ai-agent
- ai-security
- appsec
- bug-bounty
Easy, painless AWS credentials on developer laptops.
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
- pentesting
- security
- chrome-extension
- api-keys
Win Application Framework (WAF) is a lightweight Framework that helps you to create well structured XAML Applications.
Security Auditor Utility for GraphQL APIs
Galah: An LLM-powered web honeypot.
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
Documenting the unofficial and internal Steam Web API
🔒Unified API for password hashing algorithms
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
- blue-team
- detection-engineering
- edr
- endpoint-detection
A front-end JavaScript toolkit for creating DNS rebinding attacks.
Fast HTTP enumerator
- http
- fuzz
- fuzzer
- enumerator
DNS Rebinding Exploitation Framework
Integrated certification via Let's encrypt for Elixir-powered sites
A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
- threat
- hunt
- red
- blue
Easy permission definitions in Elixir apps!
Scriptable network authentication cracker
- rust
- cracking
- lua
- dictionary-attack