A toolset to make a system look as if it was the victim of an APT attack
Repository Index
59,132 visible repositories in the index
73–96 of 153 · Most stars
Windows Events Attack Samples
- threat-hunting
- evtx
- windows-security
- mitre-attack
Security sensor for realtime threat detection and protection
Crack legacy zip encryption with Biham and Kocher's known plaintext attack.
- crack
- zip
- multithread
- attack
Fullstack authentication and accounts-management for Javascript.
APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
- threat-hunting
- purpleteam
- python3
- windows-eventlog
A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks.
- rust
- security
- security-tools
Creates up to a thousand WiFi access points with custom SSIDs.
- ssid
- custom-ssids
- wifi
- esp8266
ThePhish: an automated phishing email analysis tool
Bloodhound Reporting for Blue and Purple Teams
- active
- directory
- blueteam
- purpleteam
The repository host gives no description.
A DNS rebinding attack framework.
- dns-rebinding
- dns
- vulnerability
- attack
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
- csrf
- crawler
- csrf-attacks
- token-generation
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
- sip
- voip
- password-cracker
- svwar
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
- cve-scanning
- pentesting-tools
- rust
- vulnerability-scanners
Wordlist, rules and masks from Kaonashi project (RootedCON 2019)
- wordlist
- password
- password-strength
- password-safety
ARES - authorized red-team engagement automation with dashboard, campaign scope, module orchestration, OPSEC controls, encrypted vault, and reporting.
- active-directory
- cloud-security
- defensive-validation
- fastapi
Detect deauthentication frames using an ESP8266
BitCracker is the first open source password cracking tool for memory units encrypted with BitLocker
- bitlocker
- password-cracker
- cuda
- cryptography
A framework for layer 2 attacks
StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
- bugbounty
- security
- security-tools
- mobile-security
GetContact CLI adalah project Python untuk melakukan lookup nomor telepon lewat API GetContact, tanpa aplikasi Android dan tanpa browser.
AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.
- ai
- attack-surface-management
- bbot
- cybersecurity
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)