Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
UNIX-like reverse engineering framework and command-line toolset.
Android Reverse-Engineering Workbench for VS Code
- apktool
- apk-decompiler
- apk-editor
- smali
Hide secrets with invisible characters in plain text securely using passwords 🧙🏻♂️⭐
PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
A simple, secure and modern file encryption tool (and Rust library) with small explicit keys, no config options, and UNIX-style composability.
A fast sub domain brute tool for pentesters
Atomic and non-atomic counters and rate limiting tools. Limit resource access at any scale.
Token based authentication for Rails JSON APIs. Designed to work with jToker and ng-token-auth.
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
Potentially dangerous files
Automated NoSQL database enumeration and web application exploitation tool.
A self-contained cryptographic library for Python
🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.
Cloud native secrets management for developers - never leave your command line for secrets.
Chrome extension and Express server that exploits keylogging abilities of CSS.
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
Role management library with resource scoping
OS X Auditor is a free Mac OS X computer forensics tool
SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
A generic, spec-compliant, thorough implementation of the OAuth request-signing logic
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
AuthPass - Password Manager based on Flutter for all platforms. Keepass 2.x (KDBX 3 and KDBX 4) compatible.