Git manager for pentesters
Repository Index
71,372 visible repositories in the index
961–984 of 1,194 · Most stars
Malware/IOC ingestion and processing engine
Beacon Object File (BOF) to coerce machine account auth via IPP.
This repository contains reverse engineering results and resources for a few specific car models of a very specific car manufacturer. Please don't sue.
- car-hacking
- automotive-security
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
- cybersecurity
- hacking
- iast
- dast
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
Universal script packer-- transforms any type of script into a protected ELF executable, encrypted with anti-debugging.
A honeypot for malware that propagates via USB storage devices
Searches various online resources to try and get as much info about an IP/domain as possible.
Reverse proxy with automatically obtains TLS certificates from Let's Encrypt
A library designed to generate cryptographically strong random numbers suitable for managing data such as passwords, account authentication, security tokens, and related secrets.
A low-to-medium interaction SSH Honeypot with features to capture terminal activity and upload to asciinema.org
a low-interaction honeypot
Go client for the GeoServer REST API — workspaces, datastores, layers, styles, security, ACL, GeoWebCache, Importer, plus OWS GetCapabilities/Describe. Tested against GeoServer 2.27 LTS and 2.28 stable.
- geoserver
- gis
- mapping
- golang
A honeypot for the Log4Shell vulnerability (CVE-2021-44228).
Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.
A honeypot proxy for mongodb. When run, this will proxy and log all traffic to a dummy mongodb server.
Block & stream ciphers, public key crypto, hashing, KDF, MAC, PKCS, TLS, ASN.1, BER/DER, etc.
OPNSense's Suricata IDS/IPS Detection Rules Against NMAP Scans
- crowdsec
- intrusion-detection
- intrusion-detection-system
- intrusion-prevention
Tool to help guess a files 256 byte XOR key by using frequency analysis
- frequency-analysis
- python
- xor
- malware
The current repository contains all the scripts needed to build kernel-mode mac-a-mal malicious activity hooking on macOS.
This project is obsolete is no longer developed, maintained or serviced!
A tool to Terraform and automate password cracking on AWS.
CTF in a box. Minimal setup required. (not production-ready yet)