CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
Repository Index
47,133 repositories indexed
97–120 of 400 · Most stars
A simple, secure and modern file encryption tool (and Rust library) with small explicit keys, no config options, and UNIX-style composability.
- cli
- encryption
- zero-configuration
- secure-by-default
Tool to find metadata and hidden information in the documents.
Malware Configuration And Payload Extraction
- configs
- debugging-tools
- malware
- malware-analysis
A fast sub domain brute tool for pentesters
Atomic and non-atomic counters and rate limiting tools. Limit resource access at any scale.
- security
- limit
- ratelimter
- bruteforce
🛡 A GraphQL tool to ease the creation of permission layer.
- graphql
- permissions
- server
- shield
Network Analysis Tool
Tool to look for several security related Android application vulnerabilities
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
- scanning-tool
- secret-keys
- secrets-management
- infosectools
Automated NoSQL database enumeration and web application exploitation tool.
- nosql
- nosql-databases
- penetration-testing
- scanner
OAuth2 goodies for the Djangonauts!
🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.
A repository of sysmon configuration modules
- sysmon
- dfir
- threat-hunting
- mitre-attack
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
- sleuthkit
- tct
- ntfs
- forensics
Reverse engineering tool for Linux
- gdb
- cheat-engine
- reverse-engineering
- injection
OS X Auditor is a free Mac OS X computer forensics tool
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
A toolset to make a system look as if it was the victim of an APT attack
Patch-level verification for Bundler
- bundler-audit
- ruby-advisory-db
- ruby
- dependency-checker
Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)
Th3Inspector 🕵️ Best Tool For Information Gathering 🔎
- information-gathering
- reverse-phone-lookup
- mx-lookup
- whois-lookup
Phishing Campaign Toolkit
- king-phisher
- python
- phishing
- security
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.