47,133 repositories indexed
145–168 of 331 · Most stars
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
The AI Agent for Cyber Security.
A concise, directive, specific, flexible, and free incident response plan template
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
OpenID/Connect, OAuth2, WS-Federation and SAML 2.0 server based on Duende IdentityServer and ITFoxtec Identity SAML 2.0 with its admin UI
Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.
CyLR - Live Response Collection Tool
MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.
A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
Making Laravel Passport work with Lumen
:no_entry: (DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
Go-Guardian is a golang library that provides a simple, clean, and idiomatic way to create powerful modern API and web authentication.
Incident Response Forensic Framework
Malware exploits
Security libraries for ASP.NET
Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
DFIRTrack - The Incident Response Tracking Application
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
Security profiling for blackbox Android
A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
OWASP Honeypot, Automated Deception Framework.
A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.