acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.
Repository Index
61,275 visible repositories in the index
121–144 of 151 · Most stars
Reverse proxy with automatically obtains TLS certificates from Let's Encrypt
A honeypot proxy for mongodb. When run, this will proxy and log all traffic to a dummy mongodb server.
CTF in a box. Minimal setup required. (not production-ready yet)
Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.
analyze a web-based network traffic 🕶 to detect central command and control servers
- squid
- network-traffic
- proxy-server
- incident-response
eBPF Security Monitoring and Sandboxing Agent Based on Aya
AI-powered platform for OSINT intelligence analysis. Features archive discovery with hypothesis-driven investigation, GLiNER entity extraction, Mapbox geospatial visualization, network analysis, and document processing. Built with FastAPI, Next.js, Weaviate, and DSPy.
- ai-agents
- document-processing
- dspy
- entity-extraction
Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection
- docker-image
- executable-packing
- malware-packers
- research-platform
NullKia Mobile Security Framework - Tools in Nim, Crystal, V, D, Red, Odin, Haxe, Zig, Kotlin, Lua, PHP, Python | bad-antics | github.com/bad-antics
- android-hacking
- baseband
- bootloader-unlock
- checkm8
A probably paranoid Golang utility library for securely hashing and encrypting passwords based on the Dropbox method. This implementation uses Blake2b, Scrypt and XSalsa20-Poly1305 (via NaCl SecretBox) to create secure password hashes that are also encrypted using a master passphrase.
- golang
- golang-library
- scrypt
- password-hash
An ICAP Server with yara scanner for URL and content.
- python
- icap-server
- yara
- malware-analysis
Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes
- entropy
- pe-file
- pe-files
- pe-format
Collection of hashcat lists and things.
- hashcat
- hashcat-rules
- hashcat-masks
- password-cracking
HElib is an open-source software library that implements homomorphic encryption. It supports the BGV scheme with bootstrapping and the Approximate Number CKKS scheme. HElib also includes optimizations for efficient homomorphic evaluation, focusing on effective use of ciphertext packing techniques and on the Gentry-Halevi-Smart optimizations.
framework for a high interaction SSH honeypot
Transform encryption library for Scala
- cryptography
- proxy-re-encryption
- scala
Statically compiled, zero-dependency Git pre-commit secret scanner and credentials detector written in Go. An alternative to Gitleaks and git-secrets.
- aho-corasick
- cybersecurity
- devops
- git-hook
Packing detection tool for PE files
- detector
- pe-file
- pe-format
- peid
A version of TurboPower LockBox2, that is aimed at being compatible with Delphi, FPC and Lazarus 32/64 bit
Attack tool for altering packed samples so that they evade static packing detection
- adversarial
- attack-defense
- evasion
- executable-packing
🎧 Update a pinned gist to show your top Spotify tracks/artists.
- pinned-gist
- gistbox
- spotify-box
- spotify
Security oriented helper functions for Elixir
Go package for IP2Location.io. Fetch geolocation and proxy data for an IP address, or query WHOIS details for a domain. Integrate an IP geolocation API into Golang backends, microservices and command-line tools. Enrich IPv4 and IPv6 traffic with location intelligence and network details for analytics and security use cases.
- domain-lookup
- golang
- ip-geolocation
- ip2location