Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
A high performance offensive security tool for reconnaissance and vulnerability scanning
Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
Loki - Simple IOC and YARA Scanner
- python
- yara
- signature
- scanner
CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
Catch API bugs before your users do
Malware Configuration And Payload Extraction
Up to 100x faster strings for C, C++, CUDA, Python, Rust, Swift, JS, & Go, leveraging NEON, AVX2, AVX-512, SVE, GPGPU, & SWAR to accelerate search, hashing, sorting, edit distances, sketches, and memory ops 🦖
Collaborative forensic timeline analysis
Tool to look for several security related Android application vulnerabilities
Automated NoSQL database enumeration and web application exploitation tool.
OAuth2 goodies for the Djangonauts!
Investigate malicious Windows logon by visualizing and analyzing Windows event log
A self-contained cryptographic library for Python
Modern, privacy-friendly, and detailed web analytics that works without cookies or JS.
Safely pass trusted data to untrusted environments and back.
Reverse engineering tool for Linux
Modular and decentralised honeypot
Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.
SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
A generic, spec-compliant, thorough implementation of the OAuth request-signing logic
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.
No description provided by the repository host.