Automated Attack Simulation in the Cloud, complete with detection use cases.
Repository Index
59,132 visible repositories in the index
97–120 of 153 · Most stars
🔒Unified API for password hashing algorithms
A front-end JavaScript toolkit for creating DNS rebinding attacks.
Open PS5 firmware 14.10 research: Lua userland experiments, syscall and attack-surface analysis. Kernel read/write and a complete exploit are not demonstrated.
- ps5
- ps5-homebrew
- ps5-jailbreak
- ps5-tools
Scriptable network authentication cracker
- rust
- cracking
- lua
- dictionary-attack
DDoS attacks over Tor
- ddos
- ddos-tool
- ddos-attack
- ddos-script
teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.
- ids
- teler
- waf
- teler-ids
Respounder detects presence of responder in the network.
- responder
- golang
- network-security-monitoring
- network-security
The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
- active-directory
- cheatsheet
- ctf
- cybersecurity
A USB proxy based on raw-gadget and libusb
ROPMEMU is a framework to analyze, dissect and decompile complex code-reuse attacks.
C++ application that uses memory and code hooks to detect packers
Aggregates security advisories from 10 international CERTs daily and provides an AI skill that cross-references alerts against your project's tech stack.
- cve
- security
- security-alerts
- vulnerability
Automated Tactics Techniques & Procedures
- empire
- tactics
- procedure
- cybersecurity
Create adversarial attacks against machine learning Windows malware detectors
- adversarial-machine-learning
- infosec
- python
- attack
:hammer: A multiple reverse shell session/client manager via terminal
- socket
- python
- ctf
- attack-defense
HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy + Exploit Timing Attacks
- http2
- race-condition
- race-conditions
- scapy
🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.
- padding-oracle
- aes
- decryption
- encryption
Delphi debug framework
- debug
- stacktrace
- disassembler
- portable-executable
Watchtower | Self-hosted AI security assessment, asset intelligence, and evidence workflows.
- ai-agents
- attack-surface-management
- docker
- penetration-testing
A PoC that the USB port is an attack surface for a Mazda car's infotainment system and how Mazda hacks are made
preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.
unXOR will search a XORed file and try to guess the key using known-plaintext attacks.
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
- audit
- cognito
- cybersecurity
- scanner