Repository Index

A whole bunch of public pentest reports & papers

Simple hash algorithms in OCaml

• hash
• ocaml
• sha1
• sha256

Custom password cracking rules for Hashcat and John the Ripper

• password-cracking
• hashcat
• johntheripper
• jtr

TranslatedActionScript (AS3) library for processing binary data. This library contains MD5, SHA-1, SHA-2 ( SHA-224 and SHA-256 ), Base64, CRC32 algorithms, JSON encoder & decoder as well as PNG and JPEG encoders.

• actionscript
• jpeg
• png
• md5

Go client for the GeoServer REST API — workspaces, datastores, layers, styles, security, ACL, GeoWebCache, Importer, plus OWS GetCapabilities/Describe. Tested against GeoServer 2.27 LTS and 2.28 stable.

• geoserver
• gis
• mapping
• golang

A honeypot for the Log4Shell vulnerability (CVE-2021-44228).

Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.

A honeypot proxy for mongodb. When run, this will proxy and log all traffic to a dummy mongodb server.

• mongodb
• proxy
• honeypot
• security

Block & stream ciphers, public key crypto, hashing, KDF, MAC, PKCS, TLS, ASN.1, BER/DER, etc.

Digital Forensics Artifacts Knowledge Base

Python API Monitor for Android apps

• android
• frida
• api
• monitoring

OPNSense's Suricata IDS/IPS Detection Rules Against NMAP Scans

• crowdsec
• intrusion-detection
• intrusion-detection-system
• intrusion-prevention

Delphi basic library for validation and authentication of LDAP users in Active Directory.

• activedirectory
• delphi
• adsi
• ldap

Tool to help guess a files 256 byte XOR key by using frequency analysis

• frequency-analysis
• python
• xor
• malware

The current repository contains all the scripts needed to build kernel-mode mac-a-mal malicious activity hooking on macOS.

• macos

Blazor.BFF.AzureAD.Template, Blazor WASM hosted in ASP.NET Core using Microsoft Entra ID BFF (server authentication)

• blazor
• aad
• azuread
• template

Using RNNs for password cracking

:camera: Instagram API client for the Elixir language (elixir-lang)

• elixir
• instagram-client
• oauth
• instagram

This project is obsolete is no longer developed, maintained or serviced!

A discord bot for reverse engineers and exploit developers.

A tool to Terraform and automate password cracking on AWS.

CTF in a box. Minimal setup required. (not production-ready yet)

Vulnerable Web applications Generator

• vulnerabilities
• docker
• python
• generator

Quick ORM RestServer and RestClient based on mORMot framework

• orm
• mormot
• restserver
• restclient