APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
Library and command line tool to detect SHA-1 collision in a file
A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks.
ThePhish: an automated phishing email analysis tool
A utility to safely generate malicious network traffic patterns and evaluate controls.
Bloodhound Reporting for Blue and Purple Teams
- active
- directory
- blueteam
- purpleteam
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
- csrf
- crawler
- csrf-attacks
- token-generation
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
☁️ Python package for interacting with Steam
- steam
- valve
- steamworks
- webapi
DRAKVUF Black-box Binary Analysis
A modular vulnerability scanner with automatic report generation capabilities.
🍯 Unobtrusive and flexible spam protection for Rails apps
A collection of practical security-focused guides and checklists for smart contract development
Collection of android malware samples
Procyon is a suite of Java metaprogramming tools, including a rich reflection API, a LINQ-inspired expression tree API for runtime code generation, and a Java decompiler.
:rocket: An open source alternative to searx which provides a modern-looking :sparkles:, lightning-fast :zap:, privacy respecting :disguised_face:, secure :lock: meta search engine
A collection of AWS penetration testing junk
Package gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services 🔒
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0
Interactive Delphi Reconstructor
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
Encrypt/Decrypt: AES. Hash: MD5, SHA(SHA1, SHA224, SHA256, SHA384, SHA512). Encode/Decode: Base64, Hex.