A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
- threat-hunting
- sysmon
- hunting-campaigns
- hypothesis
Repository Index
77,353 visible repositories in the index
145–168 of 946 · Most stars
Enterprise-grade Shopify Admin API authentication adapter — OAuth 2.0 Client Credentials Grant with automatic token refresh.
- authentication
- client-credentials
- httpx
- oauth2
An enterprise friendly way of detecting and preventing secrets in code.
C++ python bytecode disassembler and decompiler
- python
- decompiler
- disassembler
- cxx
The Leading Security Assessment Framework for Android.
- drozer
- android
- security
- pentesting
CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.
- compliance
- grc
- soc2
- gdpr
Volatility 3.0 development
- digital-investigation
- forensics
- incident-response
- malware
The Deepfake Offensive Toolkit
PyInstaller Extractor
- python
- pyinstaller
- decompile
- reverse-engineering
💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh
- penetrationtesting
- pentesting
- pentesting-tools
- penetration-testing
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
- reverse-engineering
- rop
- rop-exploitation
- rop-gadgets
Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).
- open-source
- pentest
- pentesting
- readteaming
A python script that finds endpoints in JavaScript files
- infosec
- endpoints
Diaphora, the most advanced Free and Open Source program diffing tool.
Toutatis is a tool that allows you to extract information from instagrams accounts such as e-mails, phone numbers and more
- information-gathering
- osint
- osint-tools
- open-source-intelligence
A Complete Osint Tool :mag:
- osint
- python
- python-script
- osint-python
command line management for Google Workspace
- gsuite
- google-apps
- google-admin-sdk
P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.
A JSON Web Token authentication plugin for the Django REST Framework.
A cross-version Python bytecode decompiler
- decompiler
- python
- bytecode
The Ultimate Information Gathering Toolkit
- cms-detection
- directory-finder
- dns-lookup
- information-gathering
Continuously jam all wifi clients/routers
Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.
PRAW, an acronym for "Python Reddit API Wrapper", is a python package that allows for simple access to Reddit's API.