A tool to abuse Exchange services
- mapi
- exchange
- shells
- pentesting
47,133 repositories indexed
121–144 of 589 · Most stars
A tool to abuse Exchange services
Collection of cryptographic hash functions written in pure Rust
Streamline your web application's authentication with Polis, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterprise-grade Single Sign-On, it also supports Directory Sync via the SCIM 2.0 protocol for automatic user and group provisioning/de-provisioning.
Binary Analysis Platform
A secure low code deception runtime framework, leveraging AI for System Virtualization.
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte
Reconnaissance Swiss Army Knife
pefile is a Python module to read and work with PE (Portable Executable) files
LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.
Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.
Support for OAuth 2 and OpenId Connect (OIDC) in Angular.
OpenID Connect (OIDC) and OAuth2 protocol support for browser-based JavaScript applications
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
Port of TweetNaCl cryptographic library to JavaScript
Analyze the security of any domain by finding all the information possible. Made in python.
Hashtopolis - distributed password cracking with Hashcat
LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
Splunk Security Content
TranslatedBased on an in-depth REA teardown, a high-fidelity recreation of the official Claude desktop UI. Recreates 30 independent React components and 8 hardcore interaction physics algorithms, and comes with a 3000+ line reverse-engineering analysis manual.
Kippo - SSH Honeypot
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS