Repository Index

Volatility plugin for extracts configuration data of known malware

• malware
• volatility
• forensics
• python

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

• network-security
• security
• arkime
• cybersecurity

:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

• cybersecurity
• incident-response
• sysinternals
• nirsoft

Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF

• owasp
• ctf
• ctfd
• application-security

Java cryptographic library that supports Argon2, bcrypt, scrypt and PBKDF2 aimed to protect passwords in databases. Easy to use by design, highly customizable, secure and portable. All the implementations follow the standards and have been reviewed to perform better in the JVM.

• pbkdf2
• bcrypt
• scrypt
• argon2

Easily encrypt data in Django

• python
• django

virtual honeypots

Guardian DB integration for tracking tokens and ensuring logout cannot be replayed.

• guardian
• database
• guardian-db

A framework for orchestrating forensic collection, processing and data export

A plugin for Microsoft.EntityFrameworkCore to add support of encrypted fields using built-in or custom encryption providers.

• entity-framework-core
• plugin
• encryption
• netstandard

A Suricata Docker image.

• suricata
• ids
• nsm
• docker

$MFT directory tree reconstruction & FILE record info

• mft-browser
• mft
• powershell
• winform

High-performance pure-javascript SHA1 implementation suitable for large binary data, reaching up to half the native speed.

Hashing for Modern Object Pascal

• delphi
• fpc
• checksum
• stream

An easy, fast lib to correctly password-protect your data

• secrets
• passwords
• encryption
• keys

Z-Hound — a CSV-first collector that finds public threat reports and extracts structured IoCs without a database, LLM, or API key.

blockchain (crypto) tools, libraries & scripts in ruby

• blockchain
• cryptohash
• distributed-database
• proof-of-work

Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.

• anti-bot
• behavioral-analysis
• bot-detection
• captcha

Secure shell history commands by finding sensitive data

• rust
• shell
• bash
• security

"Evolving AppCompat/AmCache data analysis beyond grep"

EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.

Read-only, local-first cloud security scanner for AWS, Azure and GCP. Your scan data stays on your machine.

• aws
• azure
• gcp

gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups: https://groups.google.com/forum/#!topic/gonids/

• suricata
• parse
• security-tools
• network-security