UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.
Fork of the popular zip manipulation library found in the zlib distribution.
Secure Vault for Customer PII/PHI/PCI/KYC Records
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
- tokenization
- web-security
- compliance
- security
Library and command line tool to detect SHA-1 collision in a file
A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks.
ThePhish: an automated phishing email analysis tool
Autonomous pentest legion — AI commander + worker swarm + layered fact-intent graph. 3rd Tencent Intelligent Attack-Defense online champion (634 teams · 8h unattended · 1B tokens beat 4.5B). The Nüwa Test: give AIs Create/Language/History, let a civilization grow.
SImple, common-sense Bitcoin-themed Python ECC library
Procyon is a suite of Java metaprogramming tools, including a rich reflection API, a LINQ-inspired expression tree API for runtime code generation, and a Java decompiler.
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
Malcom - Malware Communications Analyzer
A Laravel 5.8 API Boilerplate to create a ready-to-use REST API in seconds.
A pure Python HTML5 parser that just works. No C extensions to compile. No system dependencies to install. No complex API to learn.
An information security preparedness tool to do adversarial simulation.
Protect against malicious open source packages 🤖
Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.
RockYou2021.txt is a MASSIVE WORDLIST compiled of various other wordlists. RockYou2021.txt DOES NOT CONTAIN USER:PASS logins!
- wordlist
- rockyou
- rockyou2021
- wordlists
An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)
Agent-first reverse engineering for macOS, Windows and Linux: any ACP agent reads, renames and patches binaries, Android apps and GPU kernels next to you.
Extract and aggregate threat intelligence.
Authorization package for Meteor, compatible with built-in accounts packages
:closed_lock_with_key: Multiplatform command-line password manager
A KeePass-compatible password and secrets manager for people who work with AI agents.