Repository Index

Automated Red Team Infrastructure deployement using Docker

• offensive
• pentest
• bugbounty
• hacking

npm package for OpenID Connect, OAuth Code Flow with PKCE, Refresh tokens, Implicit Flow

• openid
• angular
• implicit-flow
• npm

Package gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services 🔒

• csrf-protection
• gorilla
• middleware
• golang

Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.

• digital-security
• forensics
• incident-response
• ioc

Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group).

• dfir
• dissect
• python

A header only library for creating and validating json web tokens in c++

• cpp
• header-only
• jwt
• json-web-token

A pure Python HTML5 parser that just works. No C extensions to compile. No system dependencies to install. No complex API to learn.

• html5
• parser
• python
• html

TranslatedA lightweight DDD forward/reverse business modeling framework that supports the architectural evolution of complex business systems!

• ddd
• extension
• ddd-architecture
• clean-architecture

AVML - Acquire Volatile Memory for Linux

• rust
• memory-forensics
• linux-security

SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.

• sip
• voip
• password-cracker
• svwar

Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.

• cve-scanning
• pentesting-tools
• rust
• vulnerability-scanners

macOS (& ios) Artifact Parsing Tool

• dfir
• forensics
• macos

"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.

• pentesting
• hacking
• hacking-tool
• pentest-tool

The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.

Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.

• golang
• http-server
• https-server
• ctf

Platform-Agnostic Security Tokens implementation in GO (Golang)

• go
• golang
• token
• past

Digital Forensics Investigation Platform

• dfir
• security
• incident-response
• artifacts

OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications

• openam
• sso
• oauth
• saml

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

• sigma
• python3
• evtx
• sigma-rules

Dynamic unpacker based on PE-sieve

• libpeconv
• pe-sieve
• memory-forensics
• malware-unpacker

DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.

• binary-analysis
• taint-analysis

Sandboxed Execution Environment

• python
• sandbox
• malware-analysis
• malware-research

Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.

• pentesting
• security
• chrome-extension
• api-keys

RSA public/private key generation, RSA, AES encryption/decryption, RSA sign/verify in Swift with CommonCrypto in iOS and OS X

• ios
• crypt
• swift
• rsa