Repository Index

Agent-Native multi-platform reverse engineering and CWE-602 client-side authorization audit workbench.

LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.

Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.

• malloc
• security
• memory-allocation
• malloc-library

Support for OAuth 2 and OpenId Connect (OIDC) in Angular.

OpenID Connect (OIDC) and OAuth2 protocol support for browser-based JavaScript applications

• oidc
• oidc-client
• typescript

Go login handlers for authentication providers (OAuth1, OAuth2)

Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation

• oidc
• oauth2
• openidconnect
• server

The new bridge between Burp Suite and Frida!

Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection

• ida-plugin
• taint-analysis
• reverse-engineering
• disassembly

The Offensive Manual Web Application Penetration Testing Framework.

• web-penetration-testing
• reconnaissance
• vulnerability-analysis
• scanning-enumeration

LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.

• libtomcrypt
• cryptography
• c
• encryption

RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

• hacktoberfest
• rdp
• pentest
• honeypot

CSRF protection middleware for Go.

• csrf
• go
• security
• middleware

The repository host gives no description.

• defcon
• android
• blackhat
• blackbox

goRBAC provides a lightweight role-based access control (RBAC) implementation in Golang.

• rbac
• go

🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥

• hash
• infosec
• cyber
• security

A Powershell incident response framework

detect stegano-hidden data in PNG & BMP

📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.

• forensics
• python
• android

Collaborative Incident Response platform

• forensic
• incident-response
• csirt-tooling
• python

Modern encryption for Ruby and Rails

• encryption
• activerecord
• activestorage
• carrierwave

Authentication built for Nuxt! Easily add authentication via OAuth providers, credentials or Email Magic URLs!

• authentication
• nuxt
• users
• session

UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.

• incident-response
• forensics
• computer-forensics
• triage

An OpenID Connect reference implementation in Java on the Spring platform.